webadderall 7073d7deb5 feat: extension system with marketplace, permissions, and security hardening ...

- Extension loader with manifest validation, ID sanitization, and path traversal protection
- Permission-gated runtime API (render, cursor, audio, timeline, ui, assets, export)
- Extension host with lifecycle management (activate/deactivate)
- Marketplace client for browsing, downloading, and installing extensions
- Extension Manager UI panel with enable/disable/uninstall
- IPC bridge for extension discovery, management, and marketplace operations
- Proxy guard on window.electronAPI to block extension access to privileged IPC
- Zip-slip protection via post-extraction directory traversal validation
- Safe PowerShell invocation for Windows zip extraction (no string interpolation)
- File URL resolution with path escape prevention

2026-04-12 01:37:28 +10:00

..

extensionIpc.ts

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00

extensionLoader.ts

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00

extensionMarketplace.ts

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00

extensionTypes.ts

feat: extension system with marketplace, permissions, and security hardening

2026-04-12 01:37:28 +10:00