Commit graph

11 commits

Author SHA1 Message Date
M1noa 8c941a6b72 fix(LCEL-01): disable arbitrary-path IPC + remove opener ** scope
three changes:

1. file_dialogs::write_binary_file / read_binary_file used to accept
   arbitrary paths with no validation, no dialog, no scope. now they
   refuse all paths. callers must use pick_file / save_file_dialog.

2. plugins::list_directory used to accept arbitrary paths with no
   validation. now it refuses all paths. callers must use
   get_plugins_dir.

3. capabilities/default.json had opener:allow-open-path scoped to
   path: "**" which let the webview launch ANY local path. removed
   that entry entirely. opener:allow-reveal-item-in-dir is left for
   now (used by the file manager UI).

combined, these close the webview -> arbitrary write+execute primitive.
the proper fix is to scope opener:allow-open-path to a specific games
directory once we know what paths the launcher actually needs to open.
2026-07-16 20:25:58 -05:00
str1k3r e8038f3c3e
fix(lceonline): client not opening & webview window for lceonline login (#129) 2026-07-12 09:43:17 +03:00
/home/neo 074c1e50b9
feat: titlebar dragging (#103) 2026-06-28 20:48:50 +03:00
/home/neo 62b81e5145
feat: bring back titlebar on non-macOS systems, and show on fullscreen (#96) 2026-06-28 15:26:55 +03:00
neoapps-dev 38fca607fd feat: deeplinks 2026-06-16 19:20:50 +03:00
/home/neo f2398aad23
v1.2.0 (#33) 2026-05-15 20:31:41 +03:00
neoapps-dev c49f62e539 feat: screenshots tab! 2026-04-12 18:31:57 +03:00
neoapps-dev 535735fcb2 revert the revert 2026-04-02 16:02:58 +03:00
neoapps-dev 80bd77c312 revert to 40324828 2026-04-02 15:58:45 +03:00
/home/neo 7f5d513c46
1.0.0 RELEASE [MAJOR] dev -> main 2026-03-31 20:56:16 +02:00
KayJann c94db91238 Making the source code public
Finally ! here's the source code
2026-03-12 13:52:32 +01:00