This commit mitigates an arbitrary file existence check vulnerability by
validating the provided directory path against Tauri's allowed filesystem
scope using `tauri_plugin_fs`.
- Added `tauri-plugin-fs` dependency.
- Injected `AppHandle` into the `data_dir_has_documents` command.
- Verified that the target file path (`documents.json`) is allowed
within the app's `fs_scope` before calling `.exists()`.
- Registered `tauri_plugin_fs` builder on startup.
Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
fetch_market_data hit Yahoo's v8 chart endpoint once per symbol in a
sequential loop — with 9 symbols that's 9 round trips end to end.
join_all fires them together.
Signed by a new key (public half embedded in tauri.conf.json, private
half + password live in GitHub secrets). CI now signs release artifacts
and publishes latest.json; the app checks on boot and prompts to
install and restart.
Write plain text, get live results per line. English + Russian, units,
live currency rates with crypto, percents, dates and timezones, bitwise
ops, variables and sheet totals. Tauri 2 + TypeScript engine +
CodeMirror 6; daily backups and a deleted-sheets bin.
Inspired by Numi for macOS (numi.app); built from scratch for Windows.
