mirror of
https://github.com/Horizontal42/summarum.git
synced 2026-11-10 16:51:59 +03:00
The `sym` parameter was inserted into the Yahoo Finance URL without URL encoding. This could potentially allow for URL manipulation/injection if a malicious symbol was passed. We now use `urlencoding::encode(sym)` to properly encode the symbol. Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
31 lines
786 B
TOML
31 lines
786 B
TOML
[package]
|
|
name = "summarum"
|
|
version = "1.2.9"
|
|
description = "Summarum — natural language calculator notebook"
|
|
edition = "2021"
|
|
|
|
[build-dependencies]
|
|
tauri-build = { version = "2", features = [] }
|
|
|
|
[dependencies]
|
|
tauri = { version = "2", features = ["tray-icon"] }
|
|
tauri-plugin-global-shortcut = "2"
|
|
tauri-plugin-autostart = "2"
|
|
tauri-plugin-single-instance = "2"
|
|
tauri-plugin-opener = "2"
|
|
tauri-plugin-dialog = "2"
|
|
tauri-plugin-updater = "2"
|
|
tauri-plugin-process = "2"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "stream"] }
|
|
chrono = "0.4"
|
|
futures = "0.3.32"
|
|
url = "2.5.8"
|
|
urlencoding = "2.1.3"
|
|
|
|
[profile.release]
|
|
strip = true
|
|
lto = true
|
|
opt-level = "s"
|
|
codegen-units = 1
|