# fix\(desktop\): reject unlisted source profiles and detect running browsers · pingdotgg/t3code

[View on GitCafe](https://git.cafe/pingdotgg/t3code/commit/043fab0bfc0d2c29185f6daf0f54214efcb570c3)

Repository: [pingdotgg/t3code](https://git.cafe/pingdotgg/t3code)

Visibility: public

Requested revision: 043fab0bfc0d2c29185f6daf0f54214efcb570c3

Requested commit: 043fab0bfc0d2c29185f6daf0f54214efcb570c3

Commit: 043fab0bfc0d2c29185f6daf0f54214efcb570c3

Tree: b57e45a1d235c9d4d5523afcff912d3d11701ffc

Author: Julius Marminge

Committer: Julius Marminge

## Message

```
fix(desktop): reject unlisted source profiles and detect running browsers

`importCookies` forwarded the IPC-supplied `sourceProfileDirectory` straight
into the cookie database path, so `..` segments walked out of the browser's
user-data directory and imported any cookie database reachable on disk. It is
now only honoured when the source itself reported it.

The running-browser check used `access` on Chromium's `SingletonLock`, which is
a symlink to a `<host>-<pid>` target that never exists. Following it reported
every running browser as closed, so an import could read a live, mid-write
database — Helium open on this machine was detected as closed. It now stats the
link itself.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

```

## Parents

- [5f4453cef4be94e824af82be20489c28a45419fe](https://git.cafe/pingdotgg/t3code/commit/5f4453cef4be94e824af82be20489c28a45419fe?format=markdown)

[Source at this commit](https://git.cafe/pingdotgg/t3code/tree/043fab0bfc0d2c29185f6daf0f54214efcb570c3?format=markdown)