mirror of
https://github.com/penpot/penpot.git
synced 2026-08-08 13:58:35 +00:00
Share link IDs function as capability secrets — anyone possessing the ID can read a file without authentication. The previous UUIDv8 scheme is predictable (56 bits fixed per process + 48-bit timestamp). Changed to uuid/random (UUIDv4) for genuine unpredictability. Closes #11116 AI-assisted-by: qwen3.7-plus