CalvinBackup/tauri-plugins-workspace
1
0 Fork 0
mirror of https://github.com/tauri-apps/plugins-workspace.git synced 2026-10-10 22:38:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(fs): do not deserialize customFlags from IPC (#3634)

Browse Source 
In plugins/fs/src/lib.rs OpenOptions, custom_flags was deserializable
from the `open` command arguments even though it is not in the TS types,
so a webview with a read-only permission set could pass arbitrary open(2)
flags such as O_TRUNC.

The field is now #[serde(skip)]; Rust callers still set it through
OpenOptionsExt. Rejecting write/truncate/create options of `open` under
read-only sets changes permission semantics and is deferred to v3.
This commit is contained in:
Lucas Fernandes Nogueira authored and GitHub committed 2026-10-09 13:05:12 -03:00
1 parent 77d00a4f54
commit 5de7ebfc95
2 files changed
+17 -1
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.changes/fix-fs-open-custom-flags.md
+6
View File
@@ -0,0 +1,6 @@
---
fs: patch
fs-js: patch
---
**Security:** the `open` command no longer accepts a `customFlags` option from the webview. It was not part of the JavaScript types and let the webview pass arbitrary `open(2)` flags (e.g. `O_TRUNC`) to files it may only read. `OpenOptionsExt::custom_flags` still works from Rust.