Skip to content

fix: validate cache parent and parse WebDAV property status - #1

Merged
007xf merged 1 commit into
mainfrom
fix/public-repo-audit-20261011
Oct 11, 2026
Merged

007xf merged 1 commit into
mainfrom
fix/public-repo-audit-20261011

Conversation

@007xf

@007xf 007xf commented Oct 11, 2026

Copy link
Copy Markdown
Owner

Fix two reproducible errors:

  • Cache validation omitted the application data parent itself. Replacing that parent with a symlink after initialization could delete files in an external Cache directory. Include that parent in validation; regression checks preserve an external sentinel and reject external cache statistics.
  • WebDAV health searched for text such as "200 OK" anywhere in the body, so a filename could make a failed property response appear ready. Parse complete DAV XML and accept only a successful property status at the expected element path. Cover misleading filenames, truncated XML, unrelated namespaces and a valid default DAV namespace.

Validation: both failure regressions failed against the original implementation and pass after the fix. Core smoke checks, account-free application lifecycle and single-instance/crash-recovery checks pass. An Apple Silicon release build and arm64 architecture verification pass using the compatible SDK already used by repository scripts. The local macOS 27 SDK lacks its SwiftUI macro plugin. No real Quark credentials or network-drive account were accessed; real Infuse playback and third-party engine range reads remain unverified.

@007xf
007xf merged commit b68ab98 into main Oct 11, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant