webmail

mirror of https://github.com/bulwarkmail/webmail.git synced 2026-10-31 00:12:39 +00:00

Files

T

Linus Rath f98779b0d0 fix: require manifest permissions for plugin hooks and slots

Only the host API methods checked a plugin's permissions. Every hook
and slot the sandbox reported was wired as-is, so a plugin declaring no
permissions could rewrite recipients and body of every outgoing mail
through `onTransformOutgoingEmail`, replace displayed bodies through
`onRenderEmailBody`, or read all fetched mail through
`onEmailsFetched`. Admin-installed plugins are managed, so users never
saw a consent prompt for any of it.

Each hook and slot now maps to a permission in
`lib/plugin-sandbox/permissions.ts`, checked the same way as API calls
(declared, and managed or granted). Hooks that change what is sent need
`email:send`, display takeovers need `email:render-takeover`, and a hook
or slot missing from the table is refused. Logout and account switches
stay implicit so plugins can always drop per-account state.

2026-09-26 14:26:33 +02:00

bundle-fetch.ts

fix(): refill missing managed bundles from the server #636

2026-09-07 16:52:20 +02:00

bundle-integrity.ts

fix(): refill missing managed bundles from the server #636

2026-09-07 16:52:20 +02:00

bundle-signing.ts

fix(): refill missing managed bundles from the server #636

2026-09-07 16:52:20 +02:00

consent.ts

fix(plugins): make attachment offload workable and keep the write gate closed