M1noa 8c941a6b72 fix(LCEL-01): disable arbitrary-path IPC + remove opener ** scope ... three changes: 1. file_dialogs::write_binary_file / read_binary_file used to accept arbitrary paths with no validation, no dialog, no scope. now they refuse all paths. callers must use pick_file / save_file_dialog. 2. plugins::list_directory used to accept arbitrary paths with no validation. now it refuses all paths. callers must use get_plugins_dir. 3. capabilities/default.json had opener:allow-open-path scoped to path: "**" which let the webview launch ANY local path. removed that entry entirely. opener:allow-reveal-item-in-dir is left for now (used by the file manager UI). combined, these close the webview -> arbitrary write+execute primitive. the proper fix is to scope opener:allow-open-path to a specific games directory once we know what paths the launcher actually needs to open.		2026-07-16 20:25:58 -05:00
..
default.json	fix(LCEL-01): disable arbitrary-path IPC + remove opener ** scope	2026-07-16 20:25:58 -05:00
desktop.json	feat: titlebar dragging (#103)	2026-06-28 20:48:50 +03:00