Files
gstack/browse
Garry Tan 079988ba70 fix(browse): session snapshots are atomic and the cookie filter drops loopback IP literals
A crash mid-write destroyed the previous good snapshot — the exact
scenario persistence exists to survive; writes now go tmp+rename. The
internal-network cookie filter gains 127.*/::1/169.254.* (a tampered
state file could previously hand loopback-service cookies back to the
browser), and 'state load' imports the shared filter instead of
maintaining a comment-synced copy. Test cleanup made exception-safe.
2026-08-14 17:12:26 -07:00
..