Files
IGECT ffe635bcdc fix(security): resolve audit issues across webview CSP, asset protocol, credentials, and build heap
- Enforce strict non-null CSP in tauri.conf.json
- Restrict assetProtocol allowlist to appdata, download, and temp directories
- Scope shell:allow-open in default capability to https, http, and mailto
- Configure --max-old-space-size=4096 in package.json build script to prevent heap OOM
- Fix Udemy 0-course fetch fallback logic in udemy_courses.rs
- Sanitize cookie headers against CRLF/control char injection in udemy auth.rs
- Dynamically resolve Udemy client credentials with env override support
- Enforce 0600 file permissions on saved course sessions in hotmart and udemy auth.rs
- Format recognizable token identity in hotmart_login_token
- Add comprehensive TDD unit test suites in security-config.test.ts and security-logic.test.ts
2026-10-06 19:24:47 +06:00
..