XDG-Desktop-Portal 1.20.4 Plugs Symlink Hole That Let Sandboxed Apps Trash Host Files
A sneaky symlink race in XDG-Desktop-Portal let sandboxed apps trash files outside their jail. The 1.20.4 release slams that door with file descriptors — a quiet but essential win for Flatpak users.