From 84a192fb55fa31d192d9c2b25c2804786e7461ef Mon Sep 17 00:00:00 2001 From: Soumyadipgithub <122915461+Soumyadipgithub@users.noreply.github.com> Date: Thu, 23 Apr 2026 12:52:33 +0530 Subject: [PATCH 1/3] feat: add strict Content Security Policy --- src-tauri/tauri.conf.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json index d147dc2..4d13e6c 100644 --- a/src-tauri/tauri.conf.json +++ b/src-tauri/tauri.conf.json @@ -23,7 +23,7 @@ } ], "security": { - "csp": null + "csp": "default-src 'self'; img-src 'self' asset: https://asset.localhost data:; style-src 'self' 'unsafe-inline'; script-src 'self'; connect-src 'self' ipc: http://ipc.localhost;" } }, "bundle": { From d2160b68e63a2644b3ea0b1b278a530da6242696 Mon Sep 17 00:00:00 2001 From: Soumyadipgithub <122915461+Soumyadipgithub@users.noreply.github.com> Date: Thu, 23 Apr 2026 13:03:05 +0530 Subject: [PATCH 2/3] chore: bump version to 3.0.6 and add security hardening --- CHANGELOG.md | 5 +++++ package.json | 2 +- src-tauri/Cargo.lock | 2 +- src-tauri/Cargo.toml | 2 +- 4 files changed, 8 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index beacac4..f4b16c8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,11 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). --- +## [3.0.6] — 2026-04-23 + +### Added +- **Security hardening** — Implemented a strict Content Security Policy (CSP) in `tauri.conf.json`. This defense-in-depth measure isolates the frontend from the open internet, preventing XSS-based data exfiltration. + ## [3.0.5] — 2026-04-23 ### Added diff --git a/package.json b/package.json index 51837cb..5b4323b 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "syncspeak", - "version": "3.0.5", + "version": "3.0.6", "productName": "Sync Speak", "description": "Real-time Hindi to English voice translator for meetings", "homepage": "https://github.com/Soumyadipgithub/SyncSpeak", diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock index a6ca47d..2fbff32 100644 --- a/src-tauri/Cargo.lock +++ b/src-tauri/Cargo.lock @@ -3795,7 +3795,7 @@ dependencies = [ [[package]] name = "syncspeak" -version = "3.0.4" +version = "3.0.5" dependencies = [ "log", "serde", diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml index a0ea2b0..403f4ac 100644 --- a/src-tauri/Cargo.toml +++ b/src-tauri/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "syncspeak" -version = "3.0.5" +version = "3.0.6" description = "Real-time Hindi to English voice translator for meetings" authors = ["Soumyadip Giri"] license = "MIT" From dd8246bb211b23ed99320b5497899c4c90ff619b Mon Sep 17 00:00:00 2001 From: Soumyadipgithub <122915461+Soumyadipgithub@users.noreply.github.com> Date: Thu, 23 Apr 2026 13:06:37 +0530 Subject: [PATCH 3/3] chore: update Cargo.lock for v3.0.6 --- src-tauri/Cargo.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock index 2fbff32..029156d 100644 --- a/src-tauri/Cargo.lock +++ b/src-tauri/Cargo.lock @@ -3795,7 +3795,7 @@ dependencies = [ [[package]] name = "syncspeak" -version = "3.0.5" +version = "3.0.6" dependencies = [ "log", "serde",