Files
gstack/design
Garry Tan 8697ffa09b fix(security): restrict session file permissions to owner-only
Design session files written to /tmp with default umask (0644) were
world-readable on shared systems. Sessions contain design prompts and
feedback history.

Set mode 0o600 (owner read/write only) on both create and update paths.

Closes #859

Co-Authored-By: Gus <garagon@users.noreply.github.com>
2026-04-13 09:34:27 -07:00
..