From 98d77b0799194b896bf19ef11c093e768c9bc37d Mon Sep 17 00:00:00 2001 From: Jamison Lahman Date: Mon, 6 Jul 2026 15:30:54 -0700 Subject: [PATCH] fix(desktop): grant webview ACL permissions for shell-open and titlebar drag (#12719) Co-authored-by: Claude Fable 5 --- desktop/src-tauri/capabilities/main.json | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 desktop/src-tauri/capabilities/main.json diff --git a/desktop/src-tauri/capabilities/main.json b/desktop/src-tauri/capabilities/main.json new file mode 100644 index 0000000000..e67a9a4088 --- /dev/null +++ b/desktop/src-tauri/capabilities/main.json @@ -0,0 +1,15 @@ +{ + "$schema": "../gen/schemas/desktop-schema.json", + "identifier": "main", + "description": "Grants the webview pages the plugin commands they invoke: shell open for target=_blank links (the shell plugin's injected click handler) and window dragging / double-click maximize for the injected titlebar drag region. The server URL is user-configurable (self-hosted deployments), so the remote grant must cover any origin the webview may load.", + "windows": ["*"], + "local": true, + "remote": { + "urls": ["http://*:*", "https://*:*"] + }, + "permissions": [ + "core:window:allow-start-dragging", + "core:window:allow-internal-toggle-maximize", + "shell:default" + ] +}