fix: enhance security with strict file permissions, pin isolation, and robust protocol validations

This commit is contained in:
Claudecio Martins
2026-10-11 21:47:35 -03:00
parent f4adc99a01
commit 64ca13b3a1
11 changed files with 336 additions and 93 deletions
@@ -149,7 +149,7 @@ public class SignaturePromptDialog {
boolean isA3 = cert.type() == CertificateType.A3;
boolean isWindowsStore = "provider-win-store".equalsIgnoreCase(cert.providerId());
boolean hasStoredPin = isA3 && PinSessionManager.getInstance().hasPin(cert.id());
boolean hasStoredPin = isA3 && PinSessionManager.getInstance().hasPin(context != null ? context.applicationId() : null, cert.id());
if (isA3) {
pinContainer.getStyleClass().add("dialog-box");
@@ -255,9 +255,9 @@ public class SignaturePromptDialog {
if (pinProvided) {
char[] pinChars = typedPin.toCharArray();
if (cbSavePin.isSelected()) {
PinSessionManager.getInstance().savePin(cert.id(), pinChars);
PinSessionManager.getInstance().savePin(context != null ? context.applicationId() : null, cert.id(), pinChars);
} else {
PinSessionManager.getInstance().clearPin(cert.id());
PinSessionManager.getInstance().clearPin(context != null ? context.applicationId() : null, cert.id());
}
}
}