molecule-core/plugins/browser-automation/host-bridge
Hongming Wang 5ccceb92f9 fix(security): chmod 600 macOS launchd plist containing CDP token (#296)
One-liner oversight from #295: the macOS install path wrote the plist
with the default umask (~0644), leaving CDP_PROXY_TOKEN world-readable
to any local user account. The Linux path already writes to a chmod
600 env-file — this brings macOS to parity.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-15 18:20:48 -07:00
..
cdp-proxy.cjs fix(security): token-auth on cdp-proxy to prevent LAN exposure (#293) 2026-04-15 18:00:02 -07:00
install-host-bridge.sh fix(security): chmod 600 macOS launchd plist containing CDP token (#296) 2026-04-15 18:20:48 -07:00