aleksey-hoffman 4b0a241999 Fix (extensions): harden extension isolation and permission checks - Enforce manifest-declared permissions host-side in Rust for extension shell commands, reading the authoritative on-disk manifest instead of relying on the IPC caller - Remove the unused in-process sandbox helper that shared host realm intrinsics; the Web Worker and sandboxed iframe remain the real isolation boundary - Tighten the static extension-code screen and add Rust and JS regression tests

2026-10-18 13:46:57 +03:00

..

assets/lan_share

Dev: refactor file structure and size (Rust only)

2026-03-28 15:02:26 +03:00

capabilities

New settings: Window memory / performance control

2026-06-30 11:52:07 +03:00

default-file-manager-common

Dev: sync Cargo version with package.json (2.2.0)

2026-10-17 18:33:56 +03:00

default-file-manager-launcher

Dev: sync Cargo version with package.json (2.2.0)

2026-10-17 18:33:56 +03:00

gen/windows

UX: Remove ability to set app as default FM in MS store version

2026-07-21 17:19:54 +03:00

icons

Dev: migrate to sigma-ui; add scripts; base settings page

2025-12-15 18:47:41 +03:00

patches/drag

Dev: bump deps; code clean up

2026-07-09 11:34:54 +03:00

src

Fix (extensions): harden extension isolation and permission checks - Enforce manifest-declared permissions host-side in Rust for extension shell commands, reading the authoritative on-disk manifest instead of relying on the IPC caller - Remove the unused in-process sandbox helper that shared host realm intrinsics; the Web Worker and sandboxed iframe remain the real isolation boundary - Tighten the static extension-code screen and add Rust and JS regression tests

2026-10-18 13:46:57 +03:00

.gitignore

Fix: mapped network drive dnd out is not working

2026-05-21 15:32:26 +03:00

build.rs

Refactor: app launcher handling

2026-07-16 14:12:52 +03:00

Cargo.lock

Dev: sync Cargo version with package.json (2.2.0)

2026-10-17 18:33:56 +03:00

Cargo.toml

Fix (security): SSRF via DNS rebinding and redirects in extension downloads - Check resolved addresses inside the DNS resolver so every connection is covered, including redirect hops, retries and fallback URLs - Re-validate every redirect target - Block more non-public ranges (CGNAT, 0.0.0.0/8, multicast, reserved, IPv4-mapped/compatible IPv6, NAT64, 6to4) and bracketed IPv6 literals - Fixes #552

2026-10-18 13:15:54 +03:00

tauri.conf.json

New settings: Window memory / performance control

2026-06-30 11:52:07 +03:00