Sanitize session name on IPC sender

src/ipcmessage.h

@@ -52,15 +52,16 @@ struct IpcMessage {
     }
 
     static QByteArray encode(const QString &execCommand, const QStringList &execArgs, const QString &sessionName) {
+        const QString cleanName = sanitizeSessionName(sessionName);
         if (!execCommand.isEmpty()) {
             QByteArray cmdBytes = execCommand.toUtf8();
             for (const QString &arg : execArgs) {
                 cmdBytes.append('\0');
                 cmdBytes.append(arg.toUtf8());
             }
-            return (QStringLiteral("exec:") + sessionName + QStringLiteral(":")).toUtf8() + cmdBytes + '\n';
-        } else if (!sessionName.isEmpty()) {
-            return (QStringLiteral("switch:") + sessionName + QStringLiteral("\n")).toUtf8();
+            return (QStringLiteral("exec:") + cleanName + QStringLiteral(":")).toUtf8() + cmdBytes + '\n';
+        } else if (!cleanName.isEmpty()) {
+            return (QStringLiteral("switch:") + cleanName + QStringLiteral("\n")).toUtf8();
         }
         return QByteArrayLiteral("raise\n");
     }

src/scrollencryptor.cpp

@@ -236,6 +236,7 @@ QByteArray ScrollEncryptor::encrypt(const QByteArray &plaintext)
     enc.setData(padded);
     enc.setInitializationVector(iv);
     enc.setKey(*m_keyReference);
+    // CBC without MAC is intentional: device-lock key, bit-flip malleability accepted.
     enc.setBlockMode(CryptoManager::BlockModeCbc);
     enc.setPadding(CryptoManager::EncryptionPaddingNone);
     enc.setCryptoPluginName(CryptoManager::DefaultCryptoStoragePluginName);