 Linus Rath
|
fc5f6f43d6
|
feat: expose PWA, app identity, and extension directory keys in JSON config #312
|
2026-05-21 23:35:58 +02:00 |
|
|
Linus Rath
|
400703154e
|
fix: ignore plugin-supplied target in ui.openExternalUrl to block host-frame hijack
|
2026-05-18 16:18:00 +02:00 |
|
|
Linus Rath
|
48aa607b56
|
feat: lock down plugin runtime in sandbox + signing + approval
|
2026-05-18 12:44:23 +02:00 |
|
|
Linus Rath
|
088810bd20
|
feat: harden plugin sandbox and migrate in-tree plugins
|
2026-05-18 12:17:54 +02:00 |
|
|
Linus Rath
|
9f312aa556
|
feat: sandbox plugins in null-origin iframes with postMessage RPC
|
2026-05-18 10:50:49 +02:00 |
|