fix: Change AniSkip sidecar file permissions to 0600 for enhanced security

alvarorichard · alvarorichard · commit 40b8e581e7d2 · 2025-08-11T02:49:53.000-03:00
diff --git a/internal/api/allanime_smart.go b/internal/api/allanime_smart.go
@@ -184,7 +184,8 @@ func writeAniSkipSidecar(videoPath string, ep *models.Episode) error {
 
 	b, _ := json.MarshalIndent(payload, "", "  ")
 	sidecar := strings.TrimSuffix(videoPath, filepath.Ext(videoPath)) + ".skips.json"
-	return os.WriteFile(sidecar, b, 0644)
+	// Restrictive permissions: owner read/write only
+	return os.WriteFile(sidecar, b, 0600)
 }
 
 // WriteAniSkipSidecar is an exported wrapper to write AniSkip sidecar files.

Original file line number	Diff line number	Diff line change
`@@ -184,7 +184,8 @@ func writeAniSkipSidecar(videoPath string, ep *models.Episode) error {`
`184`	`184`
`185`	`185`	`b, _ := json.MarshalIndent(payload, "", " ")`
`186`	`186`	`sidecar := strings.TrimSuffix(videoPath, filepath.Ext(videoPath)) + ".skips.json"`
`187`		`- return os.WriteFile(sidecar, b, 0644)`
	`187`	`+ // Restrictive permissions: owner read/write only`
	`188`	`+ return os.WriteFile(sidecar, b, 0600)`
`188`	`189`	`}`
`189`	`190`
`190`	`191`	`// WriteAniSkipSidecar is an exported wrapper to write AniSkip sidecar files.`