mirror of
https://github.com/tauri-apps/plugins-workspace.git
synced 2026-10-10 22:38:44 +02:00
Lucas Fernandes Nogueira
5de7ebfc95
In plugins/fs/src/lib.rs OpenOptions, custom_flags was deserializable from the `open` command arguments even though it is not in the TS types, so a webview with a read-only permission set could pass arbitrary open(2) flags such as O_TRUNC. The field is now #[serde(skip)]; Rust callers still set it through OpenOptionsExt. Rejecting write/truncate/create options of `open` under read-only sets changes permission semantics and is deferred to v3.
7 lines
313 B
Markdown
7 lines
313 B
Markdown
---
|
|
fs: patch
|
|
fs-js: patch
|
|
---
|
|
|
|
**Security:** the `open` command no longer accepts a `customFlags` option from the webview. It was not part of the JavaScript types and let the webview pass arbitrary `open(2)` flags (e.g. `O_TRUNC`) to files it may only read. `OpenOptionsExt::custom_flags` still works from Rust.
|