Skip to content

Security: Believeinus/FieldDock

Security

SECURITY.md

FieldDock security notes

Reporting

Do not include real credentials, saved presets, extension tokens, pairing codes, or vault files in an issue report. Reproduce with synthetic values and attach only the relevant error message.

Sensitive files

The encrypted vault is stored under the current user's Electron application-data directory as fielddock.vault. It should not be committed, copied into the project, or attached to support requests.

Distribution checklist

  • Keep Electron and Chromium current.
  • Run npm audit and the test suite before packaging.
  • Sign the Windows installer and executable.
  • Review extension permissions before Chrome or Edge store submission.
  • Keep nodeIntegration disabled, contextIsolation enabled, and renderer sandboxing enabled.
  • Do not add remote content to the Electron window.
  • Do not change the loopback bridge to a public network interface.

There aren't any published security advisories