cp.nvim/lua/cp
Barrett Ruth 0c06b4a55a
fix(security): harden credential storage and transmission
Problem: credential and cookie files were world-readable (0644),
passwords transited via `CP_CREDENTIALS` env var (visible in
`/proc/PID/environ`), and Kattis/USACO echoed passwords back
through stdout unnecessarily.

Solution: set 0600 permissions on `cp-nvim.json` and `cookies.json`
after every write, pass credentials via stdin pipe instead of env
var, and stop emitting passwords in ndjson from Kattis/USACO
`LoginResult` (CSES token emission unchanged).
2026-03-07 18:01:54 -05:00
..
commands feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
pickers feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
runner feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
ui feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
cache.lua fix(security): harden credential storage and transmission 2026-03-07 18:01:54 -05:00
config.lua fix(scraper): httpx login fast paths, proactive validation, and slug filename fix (#358) 2026-03-07 15:38:12 -05:00
constants.lua fix(scrapers): bad credentials detection and error message cleanup (#367) 2026-03-07 17:58:25 -05:00
credentials.lua fix(security): harden credential storage and transmission 2026-03-07 18:01:54 -05:00
health.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
helpers.lua feat(ui): auto-hide source buffer on close 2025-10-24 14:47:12 -04:00
init.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
log.lua fix(submit): use file path over stdin; fix CF CodeMirror textarea (#305) 2026-03-05 14:34:14 -05:00
race.lua fix(race): log initial countdown on start (#356) 2026-03-06 23:59:56 -05:00
restore.lua fix(submit): use file path over stdin; fix CF CodeMirror textarea (#305) 2026-03-05 14:34:14 -05:00
scraper.lua fix(security): harden credential storage and transmission 2026-03-07 18:01:54 -05:00
setup.lua feat: file conflict prompt, empty submit guard, and lint fixes (#366) 2026-03-07 16:30:51 -05:00
state.lua refactor(run): remove I/O view test navigation keymaps 2026-03-04 00:26:22 -05:00
stress.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
submit.lua fix(scrapers): bad credentials detection and error message cleanup (#367) 2026-03-07 17:58:25 -05:00
utils.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
version.lua fix: refactor 2025-09-21 11:19:00 -04:00