summarum/src-tauri
google-labs-jules[bot] 6c2cd9fda2 Fix arbitrary file write vulnerability by moving file dialog to backend
Moved the file selection dialog (`tauri-plugin-dialog`) into the Rust
backend commands (`write_image_file` and `write_text_file`) instead of
having the frontend supply arbitrary raw paths to write to. This ensures
that the OS-native dialog handles secure path resolution and prevents
potential remote code execution (RCE) via XSS.

Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
2026-07-08 12:00:02 +00:00
..
capabilities add search across all sheets and always-on-top toggle 2026-07-01 14:54:44 +03:00
icons feat: Summarum — natural language calculator notebook for Windows 2026-06-10 22:19:24 +03:00
src Fix arbitrary file write vulnerability by moving file dialog to backend 2026-07-08 12:00:02 +00:00
build.rs feat: Summarum — natural language calculator notebook for Windows 2026-06-10 22:19:24 +03:00
Cargo.lock bump version to 1.2.0 2026-07-03 13:26:32 +03:00
Cargo.toml bump version to 1.2.0 2026-07-03 13:26:32 +03:00
extension-sample.js warn users that extensions run with full file access 2026-06-18 22:00:44 +03:00
tauri.conf.json bump version to 1.2.0 2026-07-03 13:26:32 +03:00