Garry TanandClaude Fable 5 a2ae26d44c fix(design): create the OpenAI key file owner-only, closing the write-then-chmod race ...

saveApiKey wrote ~/.gstack/openai.json at the default umask and tightened to
0600 afterwards, leaving the API key briefly world-readable between write and
chmod (CWE-377/367). Pass mode 0o600 at create; the trailing chmodSync stays
as a backstop to tighten a pre-existing loose file.

Contributed by @bunlongheng (PR #2468).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-14 20:20:58 -07:00

..

src

fix(design): create the OpenAI key file owner-only, closing the write-then-chmod race

2026-08-14 20:20:58 -07:00

test

fix(design): create the OpenAI key file owner-only, closing the write-then-chmod race

2026-08-14 20:20:58 -07:00

prototype.ts

v1.30.0.0 fix wave: 21 community PRs + Windows CI extension + codex flag-semantics smoke (#1391)

2026-05-09 08:06:47 -07:00