mirror of
https://github.com/HeyPuter/puter.git
synced 2026-10-13 07:10:05 +00:00
`ExecService.launchApp`, reachable from `puter.ui.launchApp`, launched any named app with no check on the target. Gate it: a godmode target may only be launched by a godmode caller. Desktop launches (tile, double-click, URL) call `launch_app` directly and are unaffected; `connectToInstance` already had its own allowlist.