Sanitize notifications ids as they are retransmitted over the TTY

2026-06-08 14:18:26 +02:00 · 2022-09-05 10:41:19 +05:30
parent c455fea729
commit f05783e64d
4 changed files with 19 additions and 3 deletions
--- a/docs/changelog.rst
+++ b/docs/changelog.rst
@@ -56,6 +56,10 @@ Detailed list of changes

 - Wayland: Fix remembering window size not accurate when client side decorations are present

+- Fix an issue where notification identifiers were not sanitized leading to
+  code execution if the user clicked on a notification popup from a malicious
+  source. Thanks to Carter Sande for discovering this vulnerability.
+
 0.26.1 [2022-08-30]
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~