Files
IGECT ffe635bcdc fix(security): resolve audit issues across webview CSP, asset protocol, credentials, and build heap
- Enforce strict non-null CSP in tauri.conf.json
- Restrict assetProtocol allowlist to appdata, download, and temp directories
- Scope shell:allow-open in default capability to https, http, and mailto
- Configure --max-old-space-size=4096 in package.json build script to prevent heap OOM
- Fix Udemy 0-course fetch fallback logic in udemy_courses.rs
- Sanitize cookie headers against CRLF/control char injection in udemy auth.rs
- Dynamically resolve Udemy client credentials with env override support
- Enforce 0600 file permissions on saved course sessions in hotmart and udemy auth.rs
- Format recognizable token identity in hotmart_login_token
- Add comprehensive TDD unit test suites in security-config.test.ts and security-logic.test.ts
2026-10-06 19:24:47 +06:00

31 lines
786 B
JSON

{
"$schema": "../gen/schemas/desktop-schema.json",
"identifier": "default",
"description": "Capability for the main window",
"windows": ["main"],
"permissions": [
"core:default",
{
"identifier": "shell:allow-open",
"allow": [
{ "url": "https://**" },
{ "url": "http://**" },
{ "url": "mailto:**" }
]
},
"store:default",
"dialog:default",
"notification:default",
"fs:default",
"clipboard-manager:allow-read-text",
"clipboard-manager:allow-write-text",
"updater:default",
"process:allow-restart",
"core:window:allow-start-dragging",
"core:window:allow-set-badge-count",
"core:window:allow-set-progress-bar",
"core:window:allow-set-overlay-icon",
"autostart:default"
]
}