lib/view/page/private_key/edit.dart (1)

133-136: Also validate matching PEM type between BEGIN/END.

Boundary format is checked, but mismatched pairs (e.g., BEGIN RSA + END EC) still pass this gate and get rewritten. Consider enforcing same label before mutating input.

♻️ Proposed refinement

-final _pemBeginRegex = RegExp(r'^-----BEGIN [A-Z0-9 ]+-----$');
-final _pemEndRegex = RegExp(r'^-----END [A-Z0-9 ]+-----$');
+final _pemBeginRegex = RegExp(r'^-----BEGIN ([A-Z0-9 ]+)-----$');
+final _pemEndRegex = RegExp(r'^-----END ([A-Z0-9 ]+)-----$');
...
-    if (!_pemBeginRegex.hasMatch(header) || !_pemEndRegex.hasMatch(footer)) {
+    final beginMatch = _pemBeginRegex.firstMatch(header);
+    final endMatch = _pemEndRegex.firstMatch(footer);
+    if (beginMatch == null || endMatch == null) {
+      return key;
+    }
+    if (beginMatch.group(1) != endMatch.group(1)) {
       return key;
     }

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@lib/view/page/private_key/edit.dart` around lines 133 - 136, The code
currently only checks PEM boundary formats using _pemBeginRegex and _pemEndRegex
but doesn't ensure the labels match; update the validation so after confirming
both regexes match, extract the label/group from header and footer (using the
capture group(s) in _pemBeginRegex/_pemEndRegex), compare them for equality, and
if they differ return key without mutating; apply this check in the same
function where header/footer are validated before any rewriting (referencing the
header, footer, _pemBeginRegex, _pemEndRegex symbols).