mirror of
https://github.com/Horizontal42/summarum.git
synced 2026-11-11 02:12:00 +03:00
da34544806
This commit mitigates an arbitrary file existence check vulnerability by validating the provided directory path against Tauri's allowed filesystem scope using `tauri_plugin_fs`. - Added `tauri-plugin-fs` dependency. - Injected `AppHandle` into the `data_dir_has_documents` command. - Verified that the target file path (`documents.json`) is allowed within the app's `fs_scope` before calling `.exists()`. - Registered `tauri_plugin_fs` builder on startup. Co-authored-by: Horizontal42 <75383519+Horizontal42@users.noreply.github.com>
30 lines
778 B
TOML
30 lines
778 B
TOML
[package]
|
|
name = "summarum"
|
|
version = "1.2.3"
|
|
description = "Summarum — natural language calculator notebook for Windows"
|
|
edition = "2021"
|
|
|
|
[build-dependencies]
|
|
tauri-build = { version = "2", features = [] }
|
|
|
|
[dependencies]
|
|
tauri = { version = "2", features = ["tray-icon"] }
|
|
tauri-plugin-global-shortcut = "2"
|
|
tauri-plugin-autostart = "2"
|
|
tauri-plugin-single-instance = "2"
|
|
tauri-plugin-opener = "2"
|
|
tauri-plugin-dialog = "2"
|
|
tauri-plugin-updater = "2"
|
|
tauri-plugin-process = "2"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
|
|
chrono = "0.4"
|
|
futures = "0.3.32"
|
|
tauri-plugin-fs = "2.5.1"
|
|
|
|
[profile.release]
|
|
strip = true
|
|
lto = true
|
|
opt-level = "s"
|
|
codegen-units = 1
|