From c33a6a5b7ee130370aeeebf6635977415115f7da Mon Sep 17 00:00:00 2001 From: Ophestra Date: Fri, 10 Apr 2026 19:12:45 +0900 Subject: hst: optionally reject insecure options This prevents inadvertent use of insecure compatibility features. Closes #30. Signed-off-by: Ophestra --- internal/store/data.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'internal/store') diff --git a/internal/store/data.go b/internal/store/data.go index d8f2bc6d..00a23443 100644 --- a/internal/store/data.go +++ b/internal/store/data.go @@ -41,7 +41,7 @@ func entryDecode(r io.Reader, p *hst.State) (hst.Enablement, error) { return et, err } else if err = gob.NewDecoder(r).Decode(&p); err != nil { return et, &hst.AppError{Step: "decode state body", Err: err} - } else if err = p.Config.Validate(); err != nil { + } else if err = p.Config.Validate(hst.VAllowInsecure); err != nil { return et, err } else if p.Enablements.Unwrap() != et { return et, &hst.AppError{Step: "validate state enablement", Err: os.ErrInvalid, -- cgit v1.3.1