Files
tauri-plugins-workspace/plugins/fs/permissions/deny-webview-data.toml
T
TonyandGitHub 685610ae78 fix(fs): default permissions (#3507)
* Fix deny-webview-data platfroms and scopes

* Fix `create-app-specific-dirs` scopes

* Fix read-app-specific-dirs-recursive

* Re-generate schema and docs

* Remove unused `fs:allow-unwatch`

* Add change file

* Remove unused permissions

* Update linux permissions

* Update change file

* regenerate doc md and schema
2026-08-10 15:48:27 +08:00

49 lines
1.6 KiB
TOML

"$schema" = "schemas/schema.json"
[[permission]]
identifier = "deny-webview-data-linux"
description = """This denies access to the following paths
- `$APPLOCALDATA/CacheStorage/**`
- `$APPLOCALDATA/cookies`
- `$APPLOCALDATA/hsts-storage.sqlite`
- `$APPLOCALDATA/serviceworkers/**`
- `$APPLOCALDATA/WebKitCache/**`
- `$APPLOCALDATA/databases/**`
- `$APPLOCALDATA/localstorage/**`
- `$APPLOCALDATA/mediakeys/**`
- `$APPLOCALDATA/storage/**`
on linux as the webview data and configuration values are stored here.
Allowing access can lead to sensitive information disclosure and should be well considered."""
platforms = ["linux"]
[[permission.scope.deny]]
path = "$APPLOCALDATA/CacheStorage/**"
[[permission.scope.deny]]
path = "$APPLOCALDATA/cookies"
[[permission.scope.deny]]
path = "$APPLOCALDATA/hsts-storage.sqlite"
[[permission.scope.deny]]
path = "$APPLOCALDATA/serviceworkers/**"
[[permission.scope.deny]]
path = "$APPLOCALDATA/WebKitCache/**"
[[permission.scope.deny]]
path = "$APPLOCALDATA/databases/**"
[[permission.scope.deny]]
path = "$APPLOCALDATA/localstorage/**"
[[permission.scope.deny]]
path = "$APPLOCALDATA/mediakeys/**"
[[permission.scope.deny]]
path = "$APPLOCALDATA/storage/**"
[[permission]]
identifier = "deny-webview-data-windows"
description = """This denies access to the
`$APPLOCALDATA/EBWebView` folder on windows as the webview data and configuration values are stored here.
Allowing access can lead to sensitive information disclosure and should be well considered."""
platforms = ["windows"]
[[permission.scope.deny]]
path = "$APPLOCALDATA/EBWebView/**"