cp.nvim/lua/cp
Barrett Ruth b53c8ca44e
Some checks are pending
luarocks / ci (push) Waiting to run
luarocks / publish (push) Blocked by required conditions
fix(security): harden credential storage and transmission (#369)
## Problem

Credential and cookie files were world-readable (0644), passwords
transited via `CP_CREDENTIALS` env var (visible in `/proc/PID/environ`),
and Kattis/USACO echoed passwords back through stdout unnecessarily.

## Solution

Set 0600 permissions on `cp-nvim.json` and `cookies.json` after every
write, pass credentials via stdin pipe instead of env var, and stop
emitting passwords in ndjson from Kattis/USACO `LoginResult` (CSES token
emission unchanged).
2026-03-07 18:14:34 -05:00
..
commands fix(security): harden credential storage and transmission (#369) 2026-03-07 18:14:34 -05:00
pickers feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
runner feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
ui feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
cache.lua fix(security): harden credential storage and transmission (#369) 2026-03-07 18:14:34 -05:00
config.lua fix(scraper): httpx login fast paths, proactive validation, and slug filename fix (#358) 2026-03-07 15:38:12 -05:00
constants.lua fix(scrapers): bad credentials detection and error message cleanup (#367) 2026-03-07 17:58:25 -05:00
credentials.lua fix(security): harden credential storage and transmission (#369) 2026-03-07 18:14:34 -05:00
health.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
helpers.lua feat(ui): auto-hide source buffer on close 2025-10-24 14:47:12 -04:00
init.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
log.lua fix(submit): use file path over stdin; fix CF CodeMirror textarea (#305) 2026-03-05 14:34:14 -05:00
race.lua fix(race): log initial countdown on start (#356) 2026-03-06 23:59:56 -05:00
restore.lua fix(submit): use file path over stdin; fix CF CodeMirror textarea (#305) 2026-03-05 14:34:14 -05:00
scraper.lua fix(security): harden credential storage and transmission (#369) 2026-03-07 18:14:34 -05:00
setup.lua feat: file conflict prompt, empty submit guard, and lint fixes (#366) 2026-03-07 16:30:51 -05:00
state.lua refactor(run): remove I/O view test navigation keymaps 2026-03-04 00:26:22 -05:00
stress.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
submit.lua fix(security): harden credential storage and transmission (#369) 2026-03-07 18:14:34 -05:00
utils.lua feat(codechef): implement full CodeChef support (#354) 2026-03-06 23:10:44 -05:00
version.lua fix: refactor 2025-09-21 11:19:00 -04:00