ZacharyZcR 25e58a6425 fix(desktop): harden external editor and session cookie IPC (#1627) ...

* fix(desktop): stop the renderer choosing the external editor binary or reading the session cookie

open-external-editor now launches only the editor saved from a file dialog
and refuses to hand executable file types to the OS opener. The unused
get-session-cookie and wait-session-cookie channels, which returned the
httpOnly jwt, are removed.

* fix: validate setting keys before editor authorization

2026-10-14 08:22:15 +08:00

..

__fixtures__/manifests

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

lib

chore: update paths for renamed local folders

2026-10-13 16:33:20 -05:00

beta-version.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

beta-version.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

build-plugins.cjs

chore: update paths for renamed local folders

2026-10-13 16:33:20 -05:00

build-sdk-host.mjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

bundled-plugins.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-changelog.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-core-plugin-ids.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-core-plugin-ids.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-env-catalog.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-env-catalog.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-importmap-csp.cjs

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

check-sdk-guide.cjs

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

check-sdk-guide.test.ts

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

check-sdk-ui-exports.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-sdk-ui-exports.test.ts

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

check-test-locations.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

check-test-locations.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

dev-docker.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

dev-runner.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

dev.mjs

chore: update paths for renamed local folders

2026-10-13 16:33:20 -05:00

electron-app-quit.test.ts

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

electron-auto-updater.test.ts

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

electron-backend-failure.test.ts

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

electron-backend-ready.test.ts

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

electron-external-editor.test.ts

fix(desktop): harden external editor and session cookie IPC (#1627)

2026-10-14 08:22:15 +08:00

electron-external-login.test.ts

fix(electron): validate external login URL scheme and callback port (#1621)

2026-10-14 08:12:42 +08:00

electron-gpu-config.test.ts

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

electron-keyboard-shortcuts.test.ts

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

electron-linux-password-store.test.ts

release-2.7.0 (#1264)

2026-08-19 14:12:06 -05:00

electron-security-boundary.test.ts

fix(desktop): harden external editor and session cookie IPC (#1627)

2026-10-14 08:22:15 +08:00

fix-update-info.cjs

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

fix-update-info.test.ts

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

generate-appstore-notes.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-appstore-notes.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-beta-body.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-beta-body.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-dialect-schema.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-dialect-schema.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-icons.mjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-openapi.mjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-release-body.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-release-body.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

generate-settings-search-index.cjs

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

install-macos-sharp.cjs

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

latest-dev-branch.cjs

release-2.4.0 (#913)

2026-06-16 15:59:53 -05:00

latest-dev-branch.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

parse-dev-branch.cjs

release-2.4.0 (#913)

2026-06-16 15:59:53 -05:00

parse-dev-branch.test.ts

release-2.4.0 (#913)

2026-06-16 15:59:53 -05:00

patch-app-builder-lib.cjs

v2.2.0 (#738)

2026-05-06 15:12:07 -05:00

patch-better-sqlite3.cjs

v2.3.0

2026-05-28 22:29:20 -05:00

patch-nan.cjs

release-2.6.0 (#1085)

2026-07-26 18:47:27 -05:00

patch-node-pty.cjs

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

patch-ssh2-agent.cjs

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

pin-bundled-plugins.cjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

plugin-build.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

plugin-changelog.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

plugin-cli-bootstrap.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

plugin-dev.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

plugin-pack.test.ts

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

plugin-sign.test.ts

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

plugin-validate.test.ts

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

postcss-rem.test.ts

release-2.9.0 (#1532)

2026-10-01 16:20:16 -05:00

sync-version.cjs

release-2.5.1 (#1067)

2026-07-19 12:29:52 -05:00

sync-version.test.ts

release-2.5.1 (#1067)

2026-07-19 12:29:52 -05:00

upgrade-check.mjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

upgrade-check.sh

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

verify-dialects.mjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

verify-macos-sharp.cjs

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

verify-macos-sharp.test.ts

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

vite-plugin-termix-plugins.mjs

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

web-endpoint-certificate-allowlist.test.ts

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

write-electron-build-info.cjs

v2.2.0 (#738)

2026-05-06 15:12:07 -05:00