search

Necoro / feed2imap-go

A software to convert rss feeds into mails.
GNU General Public License v2.0
53 stars 7 forks source link

Don't run if config.yml is world-readable #95

Closed troffasky closed 1 year ago

troffasky commented 1 year ago

config.yml by design contains IMAP account credentials. Refuse to execute if it is world-readable. In the release tarball, the example config is mode 0644.

Necoro commented 1 year ago

Hi, that is a good point. I'll add a warning at runtime and as a comment in the example file. Stopping working will not be implemented -- it is not up to the feedreader to enforce a security model.

Necoro commented 1 year ago

Added some measurements. Closing.