LCE-Hub-Mirrors/LCE-Emerald-Launcher
1
2
Fork 0
mirror of https://github.com/LCE-Hub/LCE-Emerald-Launcher.git synced 2026-07-20 17:27:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
339 commits 2 branches 8 tags 51 MiB
Commit graph

339 commits

This branch
This branch
All branches
Author SHA1 Message Date
M1noa b93ecf78a9 fix(LCEL-02): canonicalize parent path for containment check 
the previous canonicalize() call required the resolved dest_dir to
exist, but create_dir_all runs AFTER the check. for new subdirs
the canonicalize fails and we fall back to the raw path, which
defeats the containment check.

canonicalize the existing parent and append the basename instead.
this works whether or not the target dir exists yet.
 2026-07-16 20:25:58 -05:00
M1noa 69998a6ae4 fix(LCEL-02): validate workshop install paths + uninstall paths 
three changes to workshop_install / workshop_uninstall:

1. zip_name from the frontend is now rejected if it contains '..',
   '/', '\\', or starts with '/' or '\\'. prevents the downloaded
   archive from escaping tmp_dir.

2. placeholder is now rejected if it contains '..' or starts with
   '/' or '\\'. after joining to instance_dir, the resolved path
   is canonicalized and asserted to start with instance_dir.canonicalize().
   prevents the install from escaping the instance dir.

3. workshop_uninstall now re-validates every persisted path in
   pkg.dirs against instance_dir.canonicalize() before removing.
   if an attacker injected paths into workshop_packages.json (via
   the install traversals above or via LCEL-01's write primitive),
   uninstall used to delete arbitrary files.

the proper fix is to use a safe zip library (zip-rs) that strips
'..' from members instead of shelling to bsdtar/unzip/tar. left
as a TODO so this commit stays minimal and reviewable.
 2026-07-16 20:25:58 -05:00
Edward? 8da6a217bc
Feat: Nix Flake install method with ci (#146)
Some checks are pending
Nix / build (push) Waiting to run
Details
2026-07-16 21:08:19 +03:00
Jan Dróżdż 4a561a0c78
Fixed bug with the audio track skipping on Windows (#143) 
Co-authored-by: /home/neo <158327205+neoapps-dev@users.noreply.github.com>
 2026-07-15 15:57:45 +03:00
Byte b164a52bf8
fix(lceonline): Always use the latest download available (#139) 2026-07-14 15:25:55 +03:00
str1k3r 1c65b48958
fix(lceonline): user turning null by refreshing token when app is opened (#138) 2026-07-13 14:15:06 +03:00
/home/neo 9cf05611a3
feat(hooks/useGameManager): partnership with LapboardMC (#137) 2026-07-13 13:17:31 +03:00
str1k3r 0d316a6518
fix: appheader and panorama not showing on setup (#136) 2026-07-13 12:02:19 +03:00
/home/neo 5f04f26eb8
bump (#133) 2026-07-12 20:11:06 +03:00
/home/neo 0a32333019
1.6.0 drop 1 (#132) 2026-07-12 20:07:52 +03:00
/home/neo 0594d330be
fix(versions): custom path empty directory, fixes #127 (#131) 2026-07-12 10:06:37 +03:00
str1k3r e8038f3c3e
fix(lceonline): client not opening & webview window for lceonline login (#129) 2026-07-12 09:43:17 +03:00
/home/neo 124bbad12c
docs: readme (#126) 2026-07-11 21:24:01 +03:00
/home/neo 034fbf5737
feat: 1.5.0 drop 2 (#122) 
Co-authored-by: str1k3r <115313679+S1l3ntStr1ke87@users.noreply.github.com>
 2026-07-11 21:04:53 +03:00
/home/neo f46453f1cd
feat: extended description and required versions (#119) 2026-07-07 17:10:20 +03:00
/home/neo b8c448dab8
feat(workshop): dependencies support (#118) 2026-07-07 16:30:48 +03:00
/home/neo dd3048b88c
chore: bump (#117) 2026-07-06 22:11:40 +03:00
neoapps-dev 7124b4a316 chore: bump 2026-07-06 21:55:04 +03:00
/home/neo ecf3ca084f
feat(credits): more people (#115) 2026-07-04 15:56:19 +03:00
/home/neo f7177b43bd
feat(credits): more people (#114) 
Co-authored-by: Sarah <asdyousif22.acc2@gmail.com>
 2026-07-04 15:32:11 +03:00
/home/neo 5238a9de4e
feat(hooks/useGameManager): Moon Edition panorama (#113) 2026-07-04 14:17:51 +03:00
/home/neo d9441c9a52
feat(devtools): initial model editor (#112) 2026-07-04 14:01:20 +03:00
/home/neo 121a0bf4cf
fix(hooks/useGamepad): focus state (#110) 2026-07-02 15:52:28 +03:00
/home/neo 2e8e6cdec3
feat(devtools): community guides (#109) 2026-07-02 15:25:21 +03:00
Specifix d7eca9ea60
Fix typo in Free Multiplayer section (#107) 
Corrected a typo in the README regarding multiplayer service.
 2026-07-01 11:21:33 +03:00
/home/neo 58581203e0
feat(icon): macOS style (#106) 2026-06-30 22:31:11 +03:00
/home/neo 3842bee2ab
feat: bad apple (#105) 2026-06-28 23:33:12 +03:00
/home/neo 9b4d7c7167
feat(downloadoverlay): custom image (#104) 2026-06-28 22:35:12 +03:00
/home/neo 074c1e50b9
feat: titlebar dragging (#103) 2026-06-28 20:48:50 +03:00
/home/neo b5667532ca
feat: savedata parsing and 360revived new link (#101) 2026-06-28 20:36:29 +03:00
/home/neo a94e4ec758
feat: parallel downloads, redesigned download overlay (#100) 2026-06-28 18:12:40 +03:00
/home/neo 92bd9c6f2a
feat(credits): more logos and moon edition (#99) 2026-06-28 17:11:49 +03:00
/home/neo e2459777b2
feat: neoLegacy official DLCs support (#98) 2026-06-28 17:03:53 +03:00
/home/neo e2a58ab948
fix(workshop): no image for plugins, and description bug fix (#97) 2026-06-28 15:56:05 +03:00
/home/neo 62b81e5145
feat: bring back titlebar on non-macOS systems, and show on fullscreen (#96) 2026-06-28 15:26:55 +03:00
/home/neo 98f92c3173
feat: download retry and error surfacing (#95) 2026-06-28 14:38:33 +03:00
/home/neo 85855ac4af
feat: workaround neoLegacy slim skin support (#94) 2026-06-27 14:44:33 +03:00
/home/neo 2e57576200
feat(intro): skip on keypress or click (#92) 2026-06-26 21:47:01 +03:00
/home/neo 0459370846
feat: neoLegacy gitea link, placeholder for moon edition, and bluerne… (#91) 2026-06-26 21:04:44 +03:00
/home/neo ef2dbc085f
feat(GameManager): new hellish ends logo (#90) 2026-06-25 14:19:05 +03:00
str1k3r 4e5a0ebb12
fix(lceonline): no image not showing when no icon is specified (#89) 2026-06-25 13:06:29 +03:00
str1k3r a1558b6693
fix: black screen when opening server plugins (#88) 2026-06-25 01:08:02 +03:00
/home/neo 5d7d2148cc
feat(VersionsMenu): download to custom path (#87) 2026-06-24 19:58:34 +03:00
/home/neo e65ea4e06a
fix: fresh install fullscreen (#86) 2026-06-24 13:41:17 +03:00
/home/neo d90c95da7f
bump (#84) 2026-06-23 18:58:21 +03:00
neoapps-dev 587d1983b8 fix: sfx issue, closes #80 2026-06-22 22:29:03 +03:00
neoapps-dev b3162d4e02 feat: revelations logo and instance deletion 2026-06-22 14:25:43 +03:00
neoapps-dev 4dc55c918a fix!: bug that deleted the instance right after downloading 2026-06-22 13:58:57 +03:00
neoapps-dev b7c8ef7e86 ci: release notes 2026-06-22 13:50:03 +03:00
/home/neo 9f617d4b40
docs: update screenshots 2026-06-22 13:34:18 +03:00