Block a user
Feature: SSH key/agent options and remote shell customization
Feature: Sparse file handling (--sparse)
Security: Unbounded network allocation allows denial-of-service
Security: Path traversal in received file paths
Security: TLS client does not verify server hostname
Security: No connection limits or timeouts enables fork-bomb / slowloris
Security: SUID/SGID bits preserved via metadata can escalate privileges
Security: Scanner follows symlinks and can traverse outside source tree
Bug: --progress output is missing in multithreaded mode
Bug: TCP client only accepts IPv4 addresses, not hostnames
Quality: Replace strcpy/strcat with bounded string functions
Quality: Refactor long sender functions and duplicated dry-run logic
Batch fix: security, bugs, quality, and features (v2)
Batch fix: security, bugs, quality, and features (v2)