tauri-plugins-workspace/.changes/fix-fs-open-custom-flags.md at 3a9000177cd2f51ec02096db89fc0be5d389be20

0 Fork 0

mirror of https://github.com/tauri-apps/plugins-workspace.git synced 2026-10-10 22:38:44 +02:00

Files

T

Lucas Fernandes Nogueira 5de7ebfc95 fix(fs): do not deserialize customFlags from IPC (#3634 )

In plugins/fs/src/lib.rs OpenOptions, custom_flags was deserializable
from the `open` command arguments even though it is not in the TS types,
so a webview with a read-only permission set could pass arbitrary open(2)
flags such as O_TRUNC.

The field is now #[serde(skip)]; Rust callers still set it through
OpenOptionsExt. Rejecting write/truncate/create options of `open` under
read-only sets changes permission semantics and is deferred to v3.

2026-10-09 13:05:12 -03:00

313 B

Raw Blame History

fs, fs-js

fs	fs-js
patch	patch

Security: the open command no longer accepts a customFlags option from the webview. It was not part of the JavaScript types and let the webview pass arbitrary open(2) flags (e.g. O_TRUNC) to files it may only read. OpenOptionsExt::custom_flags still works from Rust.

313 B Raw Blame History

313 B

Raw Blame History