#108 Enforce Mute Notifications and Hide Message Preview on the Rust delivery path

[Anonymous]

Originally created by: kristofferR

show_message_notification (src-tauri/src/notifications.rs) read only notification_sound; Mute and Hide Preview were enforced solely in messenger.js, which runs in the remote facebook.com origin. Any carrier:notify emit that bypassed the page-side checks (page bug, stale bundle, hostile script) delivered a full-content banner regardless of those settings.

Fix (in flight): the Rust side now suppresses delivery when muted and redacts title/body/avatar (same "Messenger"/"New message" redaction the page applies) when Hide Preview is on.

[Anonymous]

Originally posted by: kristofferR

Fixed in [#136]. show_message_notification now enforces the privacy settings on the trusted Rust side: it suppresses delivery when Mute is on (before touching dedupe state) and applies the generic "Messenger" / "New message" redaction with the avatar dropped when Hide Preview is on — so a page bug or a hostile script emitting carrier:notify can't bypass them.

[Anonymous]

Ticket changed by: kristofferR

• status: open --> closed