fix: 12 Round 10 audit findings (2 CRIT + 5 HIGH + 3 MED + 2 LOW)#84

Merged

nelsonduarte merged 9 commits into

mainfrom

Jun 9, 2026

Commits on Jun 9, 2026

fix(viewer): backup + atomic saveIncr with bbox-tiebreaker delete (CRIT-1, A2, A3)

nelsonduarte
and
claude
committed
fix(editor): defer release_doc until after encryption prompt (CRIT-2)

nelsonduarte
and
claude
committed
fix(editor): replace lru_cache with explicit overlay pixmap cache (#3, #11)

nelsonduarte
and
claude
committed
fix(viewer): refresh recents UI after add_recent_file (#5)

nelsonduarte
and
claude
committed
fix(editor): guard _apply_forms against PDFs without /AcroForm (#6)

nelsonduarte
and
claude
committed
fix(editor): confirmation prompt before delete (#8)

nelsonduarte
and
claude
committed
fix(release): anchor .SRCINFO regexes to tarball context (#9)

nelsonduarte
and
claude
committed
fix(window): accept folder drops + warn on URL drops (#12)

nelsonduarte
and
claude
committed
test: regression tests for Round 10 audit findings

nelsonduarte
and
claude
committed