Linus Rath 400703154e fix: ignore plugin-supplied target in ui.openExternalUrl to block host-frame hijack

2026-05-18 16:18:00 +02:00

..

bundle-integrity.ts

feat: sandbox plugins in null-origin iframes with postMessage RPC

2026-05-18 10:50:49 +02:00

bundle-signing.ts

feat: lock down plugin runtime in sandbox + signing + approval

2026-05-18 12:44:23 +02:00

consent.ts

feat: harden plugin sandbox and migrate in-tree plugins

2026-05-18 12:17:54 +02:00

host-api.ts

fix: ignore plugin-supplied target in ui.openExternalUrl to block host-frame hijack

2026-05-18 16:18:00 +02:00

host-bridge.ts

feat: lock down plugin runtime in sandbox + signing + approval

2026-05-18 12:44:23 +02:00

host-dialog.ts

feat: harden plugin sandbox and migrate in-tree plugins

2026-05-18 12:17:54 +02:00

loader.ts

feat: lock down plugin runtime in sandbox + signing + approval

2026-05-18 12:44:23 +02:00

protocol.ts

feat: lock down plugin runtime in sandbox + signing + approval

2026-05-18 12:44:23 +02:00

registry.ts

fix: use plugin slot offer snapshots for useSyncExternalStore

2026-05-18 11:00:05 +02:00

runtime.tsx

feat: lock down plugin runtime in sandbox + signing + approval

2026-05-18 12:44:23 +02:00

shortcuts.ts

feat: lock down plugin runtime in sandbox + signing + approval

2026-05-18 12:44:23 +02:00