mirror of
https://github.com/OpenSelena/omniget.git
synced 2026-11-04 18:22:43 +00:00
- Enforce strict non-null CSP in tauri.conf.json - Restrict assetProtocol allowlist to appdata, download, and temp directories - Scope shell:allow-open in default capability to https, http, and mailto - Configure --max-old-space-size=4096 in package.json build script to prevent heap OOM - Fix Udemy 0-course fetch fallback logic in udemy_courses.rs - Sanitize cookie headers against CRLF/control char injection in udemy auth.rs - Dynamically resolve Udemy client credentials with env override support - Enforce 0600 file permissions on saved course sessions in hotmart and udemy auth.rs - Format recognizable token identity in hotmart_login_token - Add comprehensive TDD unit test suites in security-config.test.ts and security-logic.test.ts
31 lines
786 B
JSON
31 lines
786 B
JSON
{
|
|
"$schema": "../gen/schemas/desktop-schema.json",
|
|
"identifier": "default",
|
|
"description": "Capability for the main window",
|
|
"windows": ["main"],
|
|
"permissions": [
|
|
"core:default",
|
|
{
|
|
"identifier": "shell:allow-open",
|
|
"allow": [
|
|
{ "url": "https://**" },
|
|
{ "url": "http://**" },
|
|
{ "url": "mailto:**" }
|
|
]
|
|
},
|
|
"store:default",
|
|
"dialog:default",
|
|
"notification:default",
|
|
"fs:default",
|
|
"clipboard-manager:allow-read-text",
|
|
"clipboard-manager:allow-write-text",
|
|
"updater:default",
|
|
"process:allow-restart",
|
|
"core:window:allow-start-dragging",
|
|
"core:window:allow-set-badge-count",
|
|
"core:window:allow-set-progress-bar",
|
|
"core:window:allow-set-overlay-icon",
|
|
"autostart:default"
|
|
]
|
|
}
|