Security context

Highlights

Cryptographic Issues: 1 prior fix. Scrutinize any change in this area.

includes/functions.php: most-fixed (3 issues). Treat as high-risk during review.

2 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Insecure Direct Object References (IDOR): Secrets written to disk were historically predictable, enabling unauthorized retrieval. Attackers could guess file paths if the generation scheme lacked sufficient randomness or entropy. Ensuring strong random prefixing is critical to maintaining zero-knowledge guarantees.

Path Traversal: User-supplied template parameters were processed without path sanitization, allowing attackers to traverse directories and read arbitrary local files. Consistently stripping directory separators from input parameters is necessary to secure file read operations.

Cryptographic Weakness: Insecure cryptographic parameter binding allowed potential tampering with ciphertexts. Failing to bind the initialization vector (IV) to the key during hash generation left the encrypted payload vulnerable to parameter manipulation.