fix: enhance security with strict file permissions, pin isolation, and robust protocol validations
This commit is contained in:
+3
-3
@@ -149,7 +149,7 @@ public class SignaturePromptDialog {
|
||||
|
||||
boolean isA3 = cert.type() == CertificateType.A3;
|
||||
boolean isWindowsStore = "provider-win-store".equalsIgnoreCase(cert.providerId());
|
||||
boolean hasStoredPin = isA3 && PinSessionManager.getInstance().hasPin(cert.id());
|
||||
boolean hasStoredPin = isA3 && PinSessionManager.getInstance().hasPin(context != null ? context.applicationId() : null, cert.id());
|
||||
|
||||
if (isA3) {
|
||||
pinContainer.getStyleClass().add("dialog-box");
|
||||
@@ -255,9 +255,9 @@ public class SignaturePromptDialog {
|
||||
if (pinProvided) {
|
||||
char[] pinChars = typedPin.toCharArray();
|
||||
if (cbSavePin.isSelected()) {
|
||||
PinSessionManager.getInstance().savePin(cert.id(), pinChars);
|
||||
PinSessionManager.getInstance().savePin(context != null ? context.applicationId() : null, cert.id(), pinChars);
|
||||
} else {
|
||||
PinSessionManager.getInstance().clearPin(cert.id());
|
||||
PinSessionManager.getInstance().clearPin(context != null ? context.applicationId() : null, cert.id());
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user