ZacharyZcR 25e58a6425 fix(desktop): harden external editor and session cookie IPC (#1627) ...

* fix(desktop): stop the renderer choosing the external editor binary or reading the session cookie

open-external-editor now launches only the editor saved from a file dialog
and refuses to hand executable file types to the OS opener. The unused
get-session-cookie and wait-session-cookie channels, which returned the
httpOnly jwt, are removed.

* fix: validate setting keys before editor authorization

2026-10-14 08:22:15 +08:00

..

app-quit.cjs

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

auto-updater.cjs

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

backend-failure.cjs

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

backend-paths.cjs

release-2.6.1 (#1161)

2026-08-06 14:41:39 -05:00

c2s-auth.cjs

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

desktop-settings.cjs

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

external-editor.cjs

fix(desktop): harden external editor and session cookie IPC (#1627)

2026-10-14 08:22:15 +08:00

external-login.cjs

fix(electron): validate external login URL scheme and callback port (#1621)

2026-10-14 08:12:42 +08:00

installer.nsh

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

isolated-window.cjs

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

keyboard-shortcuts.cjs

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

linked-server.cjs

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

linux-password-store.cjs

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

local-files.cjs

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

local-shell.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

main.cjs

fix(desktop): harden external editor and session cookie IPC (#1627)

2026-10-14 08:22:15 +08:00

native-rdp.cjs

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

preload.js

fix(desktop): harden external editor and session cookie IPC (#1627)

2026-10-14 08:22:15 +08:00

rename-local-path.cjs

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00