KEIBIDROP Files

Security hardening across the sync engine. No new features, and the peer protocol is unchanged: 0.4.0 and 0.4.1 peers still connect to 0.4.2.

• A connection now rejects any frame whose nonce arrives from the wrong direction, stopping a reflection attack on an established session.
• Paths sent by a peer are checked at the door. Names that Windows would bend into ".." or into the save folder itself are refused on every platform, so a hostile peer cannot write outside the folder you shared or target the folder itself.
• Read requests are clamped: a hostile size or offset fails cleanly instead of wrapping on 32-bit devices or reaching the file at all.
• An inbound handshake gets 30 seconds to finish and the connection is closed when it fails, so a peer that connects and goes silent cannot pin a connection slot. Bridge connections keep their full wait for a peer that is still on its way.
• Go toolchain updated to 1.25.14, clearing 27 standard-library CVEs (none reachable from KeibiDrop).

Platforms: macOS (arm64, x86_64), Linux (x86_64), Windows (x86_64)

Full Changelog: https://github.com/KeibiSoft/KeibiDrop/compare/v0.4.1...v0.4.2