v0.9.5-6: CRITICAL fix for boot password sequence and power menu
CRITICAL SECURITY FIX #1: Boot password now required BEFORE showing websites - Password screen now appears IMMEDIATELY on boot (no website flash) - Websites and rotation timer only start AFTER successful password entry - Root cause: attachView() was called before checking boot flag - Fix: Reordered code to check boot flag FIRST, only call attachView() if no boot - unlockScreen() now starts master timer when unlocking from boot password CRITICAL SECURITY FIX #2: Limited power menu when locked out - Ctrl+Alt+Del when locked now shows LIMITED menu: Shutdown/Restart/Cancel - NO Reload option available when locked (prevents bypass) - Full menu (with Reload) only available when unlocked - Still allows emergency shutdown/restart without password - Message clearly indicates "System is locked. Limited options available." ROOT CAUSE OF BOOT PASSWORD BYPASS: In v0.9.5-5, the code sequence was: 1. attachView(startIndex) - shows website 2. Check boot flag - if exists, show password screen This meant users saw the website for ~1 second, then password screen appeared. Pressing Ctrl+Alt+Del at that moment would reload and bypass the password. NEW SEQUENCE in v0.9.5-6: 1. Check boot flag FIRST 2. If boot flag exists: show password screen, DON'T load websites 3. If no boot flag: load websites normally 4. When password entered: attachView() and startMasterTimer() Includes all fixes from v0.9.5-5 and v0.9.5-4
This commit is contained in:
Claude