Shirone 2de3ae69d4 fix: Address CodeRabbit security and robustness review comments ...

- Guard against NaN ports from non-numeric env variables in constants.ts
- Validate IPC sender before returning API key to prevent leaking to
  untrusted senders (webviews, additional windows)
- Filter dialog properties to maintain file-only intent and prevent
  renderer from requesting directories via OPEN_FILE
- Fix Windows VS Code URL paths by ensuring leading slash after 'file'

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-25 21:02:53 +01:00

..

server

fix: Also check hasApiKey for CLI authentication

2026-01-25 20:04:16 +01:00

ui

fix: Address CodeRabbit security and robustness review comments

2026-01-25 21:02:53 +01:00