Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

tutao/tutanota

              master @ 37c0237
            

138

Fixes

CVEs

CRITICAL

Peak severity

76.3%

Coverage

Highlights

Auth Bypass: 24 prior fixes. Scrutinize any change in this area.

src/misc/HtmlSanitizer.js: most-fixed (11 issues). Treat as high-risk during review.

52 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Sandbox Escape: The DesktopFileFacade exposes file system APIs over IPC. Compromised renderers could read or delete arbitrary local files unless operations are strictly locked down to authorized application temporary directories. Sibling implementations must enforce equivalent path restrictions.

Auth Bypass: Public key resolution did not consistently verify signature authenticity or restrict accepted key versions. This allowed potential key-substitution or protocol-downgrade attacks during cryptographic operations. Every public key resolution must mandate validation against trusted identity keys.

Reflected XSS: HTML sanitization bypasses consistently allowed arbitrary script injection or tracking pixel loading via background images, CSS properties (like position), or nested SVG integration points. Frequent updates to DOMPurify and strict attribute filters are necessary.