Horizontal42 c1a7254fdf fix arbitrary file write via write_text_file/write_image_file ... Both Tauri commands took a raw path string straight from the frontend and wrote to it with no validation — any code able to call invoke() (a compromised or malicious extension script, which run with full page privileges) could write to any path the OS user has access to, not just one chosen through the save dialog. Move the save-file dialog into the Rust command itself so the only path ever used is one the native dialog returned; the frontend now only sends the content to save.		2026-07-08 15:50:13 +03:00
..
app.css	fix: results-width slider still showed the native OS control	2026-07-03 13:12:50 +03:00
editor.ts	avoid rebuilding decoration fields on every editor transaction	2026-07-08 14:15:04 +03:00
export.ts	fix arbitrary file write via write_text_file/write_image_file	2026-07-08 15:50:13 +03:00
search.ts	refactor: pull cross-sheet search and PNG export out of main.ts	2026-07-03 11:57:33 +03:00