Merge remote-tracking branch 'origin/v2' into v3

plugins/fs/permissions/autogenerated/reference.md

@@ -22,7 +22,9 @@ the `mkdir` command.
 
 This default permission set prevents access to critical components
 of the Tauri application by default.
-On Windows the webview data folder access is denied.
+
+- On Windows the access to webview data folder `$APPLOCALDATA/EBWebView` is denied.
+- On Linux the access to webview data paths inside `$APPLOCALDATA` are denied.
 
 #### This default permission set includes the following:
 
@@ -3701,8 +3703,19 @@ This denies access to dangerous Tauri relevant files and folders by default.
 </td>
 <td>
 
-This denies read access to the
-`$APPLOCALDATA` folder on linux as the webview data and configuration values are stored here.
+This denies access to the following paths
+
+- `$APPLOCALDATA/CacheStorage/**`
+- `$APPLOCALDATA/cookies`
+- `$APPLOCALDATA/hsts-storage.sqlite`
+- `$APPLOCALDATA/serviceworkers/**`
+- `$APPLOCALDATA/WebKitCache/**`
+- `$APPLOCALDATA/databases/**`
+- `$APPLOCALDATA/localstorage/**`
+- `$APPLOCALDATA/mediakeys/**`
+- `$APPLOCALDATA/storage/**`
+
+on linux as the webview data and configuration values are stored here.
 Allowing access can lead to sensitive information disclosure and should be well considered.
 
 </td>
@@ -3716,7 +3729,7 @@ Allowing access can lead to sensitive information disclosure and should be well
 </td>
 <td>
 
-This denies read access to the
+This denies access to the
 `$APPLOCALDATA/EBWebView` folder on windows as the webview data and configuration values are stored here.
 Allowing access can lead to sensitive information disclosure and should be well considered.
 
@@ -3745,7 +3758,7 @@ This enables all read related commands without any pre-configured accessible pat
 <td>
 
 This permission allows recursive read functionality on the application
-specific base directories. 
+specific base directories.
 
 
 </td>

plugins/fs/permissions/create-app-specific-dirs.toml

@@ -1,8 +1,8 @@
 "$schema" = "schemas/schema.json"
 
-[[permission]]
+[[set]]
 identifier = "create-app-specific-dirs"
 description = """
 This permissions allows to create the application specific directories.
 """
-commands.allow = ["mkdir", "scope-app-index"]
+permissions = ["allow-mkdir", "scope-app-index"]

plugins/fs/permissions/default.toml

@@ -24,7 +24,9 @@ the `mkdir` command.
 
 This default permission set prevents access to critical components
 of the Tauri application by default.
-On Windows the webview data folder access is denied.
+
+- On Windows the access to webview data folder `$APPLOCALDATA/EBWebView` is denied.
+- On Linux the access to webview data paths inside `$APPLOCALDATA` are denied.
 """
 permissions = [
   "create-app-specific-dirs",

plugins/fs/permissions/deny-webview-data.toml

@@ -2,18 +2,47 @@
 
 [[permission]]
 identifier = "deny-webview-data-linux"
-description = """This denies read access to the
-`$APPLOCALDATA` folder on linux as the webview data and configuration values are stored here.
-Allowing access can lead to sensitive information disclosure and should be well considered."""
+description = """This denies access to the following paths
 
-[[scope.deny]]
-path = "$APPLOCALDATA/**"
+- `$APPLOCALDATA/CacheStorage/**`
+- `$APPLOCALDATA/cookies`
+- `$APPLOCALDATA/hsts-storage.sqlite`
+- `$APPLOCALDATA/serviceworkers/**`
+- `$APPLOCALDATA/WebKitCache/**`
+- `$APPLOCALDATA/databases/**`
+- `$APPLOCALDATA/localstorage/**`
+- `$APPLOCALDATA/mediakeys/**`
+- `$APPLOCALDATA/storage/**`
+
+on linux as the webview data and configuration values are stored here.
+Allowing access can lead to sensitive information disclosure and should be well considered."""
+platforms = ["linux"]
+
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/CacheStorage/**"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/cookies"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/hsts-storage.sqlite"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/serviceworkers/**"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/WebKitCache/**"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/databases/**"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/localstorage/**"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/mediakeys/**"
+[[permission.scope.deny]]
+path = "$APPLOCALDATA/storage/**"
 
 [[permission]]
 identifier = "deny-webview-data-windows"
-description = """This denies read access to the
+description = """This denies access to the
 `$APPLOCALDATA/EBWebView` folder on windows as the webview data and configuration values are stored here.
 Allowing access can lead to sensitive information disclosure and should be well considered."""
+platforms = ["windows"]
 
-[[scope.deny]]
+[[permission.scope.deny]]
 path = "$APPLOCALDATA/EBWebView/**"

plugins/fs/permissions/read-app-specific-dirs-recursive.toml

@@ -1,17 +1,17 @@
 "$schema" = "schemas/schema.json"
 
-[[permission]]
+[[set]]
 identifier = "read-app-specific-dirs-recursive"
 description = """
 This permission allows recursive read functionality on the application
-specific base directories. 
+specific base directories.
 """
-commands.allow = [
-  "read_dir",
-  "read_file",
-  "read_text_file",
-  "read_text_file_lines",
-  "read_text_file_lines_next",
-  "exists",
+permissions = [
+  "allow-read-dir",
+  "allow-read-file",
+  "allow-read-text-file",
+  "allow-read-text-file-lines",
+  "allow-read-text-file-lines-next",
+  "allow-exists",
   "scope-app-recursive",
 ]