build.rs now derives an AppManifest from generate_handler!, which makes tauri 2.11 apply the ACL to app commands (it skips them entirely without one). default.json grants the 110 main-window commands, file-viewer.json the five viewer_* commands, and build.rs refuses to build on a missing, misspelled, duplicated, misfiled or deny-* grant, or on a hand-written permission file. Stale autogenerated permissions are pruned per build. Closes the residual risk recorded by the terminal file viewer: a compromised viewer window could invoke any app command. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
19 lines
538 B
Plaintext
19 lines
538 B
Plaintext
node_modules/
|
|
app/dist/
|
|
app/src-tauri/target/
|
|
# Written by build.rs (tauri-build AppManifest); gen/schemas/acl-manifests.json is the
|
|
# tracked, reviewable form of the same information.
|
|
app/src-tauri/permissions/autogenerated/
|
|
Screenshot*.png
|
|
code-review.md
|
|
|
|
# Windows NTFS alternate-data-stream artifacts, created when files arrive
|
|
# through the WSL/host bind mount.
|
|
*:Zone.Identifier
|
|
|
|
# Local bug-report screenshots, same spirit as Screenshot*.png above.
|
|
screenshot_for_fix/
|
|
|
|
# Package files pulled in by ad-hoc verification runs.
|
|
*.deb
|