cinny

Files

T

jaredandClaude Opus 5 bacfef5558 fix(security): forwarding encrypted media to a plaintext room re-uploads it

buildForwardContent copied content.file (AES key/iv/hashes) verbatim, so
forwarding from an E2EE room into an unencrypted one published the key.
For unencrypted destinations the attachment is now downloaded, decrypted
and re-uploaded as plaintext (url instead of file, thumbnail key
stripped); if that fails the forward is refused rather than leaking.
Encrypted destinations unchanged. Needs a manual check on a live
encrypted -> plaintext forward.

Fixes #63

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PPmy3tPq869XDW4njjVaKA

2026-09-12 20:28:41 -04:00

EditHistoryModal.tsx

fix(edit-history): harden diff after review

2026-07-10 11:11:16 -04:00

EncryptedContent.tsx

fix message does not appear after decryption complete (#2209 )

2025-02-15 18:58:57 +11:00

forwardContent.test.ts

feat(ux): forward to multiple rooms + live bookmark previews (P6-3)

2026-07-02 14:30:33 -04:00

forwardContent.ts

fix(security): forwarding encrypted media to a plaintext room re-uploads it