webadderall d3fab9d83e security: restrict read-local-file and open-external-url IPC handlers ...

- read-local-file: whitelist to RECORDINGS_DIR, USER_DATA_PATH, asset root, and temp only
- open-external-url: reject non-http/https protocols (blocks file://, javascript:, etc.)

Prevents malicious renderer code from reading arbitrary files (SSH keys,
credentials) or opening dangerous URLs via shell.openExternal.

2026-04-12 01:37:28 +10:00

..

extensions

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00

ipc

security: restrict read-local-file and open-external-url IPC handlers

2026-04-12 01:37:28 +10:00

native

fix(macos): lower deployment target to macOS 13.0 for native helpers

2026-04-09 21:23:33 +10:00

appPaths.ts

fix(dev): isolate app data paths from production

2026-03-28 22:00:15 +11:00

cursorHider.ts

…

electron-env.d.ts

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00

main.ts

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00

preload.ts

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00

rendererServer.ts

fix(windows): use path.posix for URL path resolution

2026-04-07 06:18:45 +02:00

uiohook-napi.d.ts

…

updater.ts

feat(updater): add update status summary, logging, and new IPC channels

2026-03-29 19:30:01 +11:00

windows.ts

fix(hud): resolve overlay snap to primary on multi-monitor

2026-04-09 14:00:50 +02:00