mirror of
https://github.com/Horizontal42/summarum.git
synced 2026-11-11 01:02:01 +03:00
4b80189cac
This commit replaces the insecure `new Function` execution of extension code with a WASM-based sandbox using `quickjs-emscripten`. This provides true isolation from the host JavaScript realm, preventing DOM tampering and cross-realm escapes while preserving synchronous API capabilities. Tests have been updated accordingly. Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
40 lines
1.2 KiB
JSON
40 lines
1.2 KiB
JSON
{
|
|
"name": "summarum",
|
|
"private": true,
|
|
"version": "1.2.2",
|
|
"description": "Summarum — natural language calculator notebook for Windows",
|
|
"type": "module",
|
|
"scripts": {
|
|
"dev": "vite",
|
|
"build": "tsc --noEmit && vite build",
|
|
"preview": "vite preview",
|
|
"test": "vitest run",
|
|
"test:watch": "vitest",
|
|
"icons": "node scripts/gen-icon.ts",
|
|
"tauri": "tauri"
|
|
},
|
|
"dependencies": {
|
|
"@codemirror/autocomplete": "^6.18.0",
|
|
"@codemirror/commands": "^6.8.0",
|
|
"@codemirror/language": "^6.10.0",
|
|
"@codemirror/state": "^6.5.0",
|
|
"@codemirror/view": "^6.36.0",
|
|
"@lezer/highlight": "^1.2.0",
|
|
"@tauri-apps/api": "^2.5.0",
|
|
"@tauri-apps/plugin-autostart": "^2.3.0",
|
|
"@tauri-apps/plugin-dialog": "^2.7.1",
|
|
"@tauri-apps/plugin-global-shortcut": "^2.2.0",
|
|
"@tauri-apps/plugin-opener": "^2.2.0",
|
|
"@tauri-apps/plugin-process": "^2.3.1",
|
|
"@tauri-apps/plugin-updater": "^2.10.1",
|
|
"decimal.js": "^10.4.3",
|
|
"quickjs-emscripten": "^0.32.0"
|
|
},
|
|
"devDependencies": {
|
|
"@tauri-apps/cli": "^2.5.0",
|
|
"@types/node": "^25.9.2",
|
|
"typescript": "^5.7.0",
|
|
"vite": "^6.0.0",
|
|
"vitest": "^3.0.0"
|
|
}
|
|
}
|