4 Commits

Include renames

Author	SHA1	Message	Date
Linus Rath	400703154e	fix: ignore plugin-supplied target in ui.openExternalUrl to block host-frame hijack	2026-05-18 16:18:00 +02:00
Linus Rath	48aa607b56	feat: lock down plugin runtime in sandbox + signing + approval	2026-05-18 12:44:23 +02:00
Linus Rath	088810bd20	feat: harden plugin sandbox and migrate in-tree plugins	2026-05-18 12:17:54 +02:00
Linus Rath	9f312aa556	feat: sandbox plugins in null-origin iframes with postMessage RPC	2026-05-18 10:50:49 +02:00