summarum/src-tauri
google-labs-jules[bot] da34544806 Fix arbitrary file check vulnerability in data_dir_has_documents
This commit mitigates an arbitrary file existence check vulnerability by
validating the provided directory path against Tauri's allowed filesystem
scope using `tauri_plugin_fs`.

- Added `tauri-plugin-fs` dependency.
- Injected `AppHandle` into the `data_dir_has_documents` command.
- Verified that the target file path (`documents.json`) is allowed
  within the app's `fs_scope` before calling `.exists()`.
- Registered `tauri_plugin_fs` builder on startup.

Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
2026-08-09 10:22:14 +00:00
..
capabilities add search across all sheets and always-on-top toggle 2026-07-01 14:54:44 +03:00
icons feat: Summarum — natural language calculator notebook for Windows 2026-06-10 22:19:24 +03:00
src Fix arbitrary file check vulnerability in data_dir_has_documents 2026-08-09 10:22:14 +00:00
build.rs feat: Summarum — natural language calculator notebook for Windows 2026-06-10 22:19:24 +03:00
Cargo.lock Fix arbitrary file check vulnerability in data_dir_has_documents 2026-08-09 10:22:14 +00:00
Cargo.toml Fix arbitrary file check vulnerability in data_dir_has_documents 2026-08-09 10:22:14 +00:00
extension-sample.js run extensions in a quickjs wasm sandbox 2026-07-29 14:38:28 +03:00
tauri.conf.json Revert "rotate updater signing pubkey" 2026-07-29 15:54:41 +03:00