Validate that resolved list paths stay within the workspace root to prevent directory traversal via malicious list names. Enable Content Security Policy in Tauri config instead of leaving it null. Fix CLI domain extraction to strip userinfo (user:pass@) from URLs before using as keyring service name. |
||
|---|---|---|
| .. | ||
| capabilities | ||
| icons | ||
| src | ||
| build.rs | ||
| Cargo.lock | ||
| Cargo.toml | ||
| tauri.conf.json | ||