From d3b58283dd6c4bf0b31ef7ce9c03e9b334e3b954 Mon Sep 17 00:00:00 2001
From: OlegTheSnowman <123775785+OlegTheSnowman@users.noreply.github.com>
Date: Sat, 11 Jul 2026 00:58:22 +0300
Subject: [PATCH] Security/privacy audit: fix broken gitignore, exclude debug
 logs

Audited the full repo and git history for credentials, command history,
game transcripts, and any other private data:
- No passwords/auto-login fields ever committed in the world file.
- mushclient_prefs.sqlite (the only DB ever committed) contains only
  window-position/UI settings, nothing credential-related.
- No state/*.xml plugin state files, log files, or transcripts were
  ever committed - confirmed via full git history scan, not just the
  current working tree.
- Full-history grep for password/token/secret/key patterns turned up
  nothing but LuaSocket's own bundled example code.

Found and fixed a real bug while auditing: .gitignore's state/ rule was
missing a newline, joining two patterns into one that matched nothing,
so state/*.xml files were untracked by luck (never staged) rather than
actually ignored. Also excluded *.log and SQLite -shm/-wal temp files
going forward, since debug logs can contain snippets of typed game
text. Cleaned up stray gitignore-pattern text that had been pasted into
state/.gitkeep by mistake.
---
 .gitignore                                | 13 +++++++++++--
 cosmic rage/worlds/plugins/state/.gitkeep |  3 ---
 2 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/.gitignore b/.gitignore
index 7a9a55d..f4aff9c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,11 @@
-cosmic rage/worlds/plugins/state/*.xmlcosmic rage/worlds/plugins/state/*
-!cosmic rage/worlds/plugins/state/.gitkeep
\ No newline at end of file
+cosmic rage/worlds/plugins/state/*.xml
+cosmic rage/worlds/plugins/state/*
+!cosmic rage/worlds/plugins/state/.gitkeep
+
+# Debug logs and local logging output - can contain snippets of typed game text
+*.log
+cosmic rage/logs/
+
+# SQLite temp files
+*.sqlite-shm
+*.sqlite-wal
\ No newline at end of file
diff --git a/cosmic rage/worlds/plugins/state/.gitkeep b/cosmic rage/worlds/plugins/state/.gitkeep
index 2a9d2cd..e69de29 100644
--- a/cosmic rage/worlds/plugins/state/.gitkeep	
+++ b/cosmic rage/worlds/plugins/state/.gitkeep	
@@ -1,3 +0,0 @@
-cosmic rage/worlds/plugins/state/*.xmlcosmic rage/worlds/plugins/state/*
-
-!cosmic rage/worlds/plugins/state/.gitkeep
\ No newline at end of file