Open-source contribution
Cherry Studio
Core Developer · Community project
I contribute to this open-source AI desktop client, with work across security, backup and restore, performance, and everyday developer experience.
Explore the projectSelected contribution Merged
Safer boundaries for desktop AI.
PR #18751 adds sender validation to legacy IPC handlers, aligns unsafe-file opening checks, and adds archive extraction containment checks.
- Validate the source of privileged requests
- Apply existing file-opening safety policy
- Check ZIP entries before extraction