Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

handle file links, fix web links, security #153

Merged
merged 1 commit into from
Feb 11, 2024
Merged

handle file links, fix web links, security #153

merged 1 commit into from
Feb 11, 2024

Conversation

cloverich
Copy link
Owner

@cloverich cloverich commented Feb 11, 2024

The main index.js file is spaghetti but reasonably well commented; I think better if all functions are externalized, and the main file handles only attaching listeners at the appropriate times; should make it easier to understand at a glance and to browse.

Was unable to update the registerFileHandler (deprecated) because after doing so, video's would not seek (but would otherwise work). Will open follow up issue with implementation I tried.

- allow drag and dropping files into the editor. Copy files to user files directory, then render a link to them. Clicking the link opens the file in finder
- fix issue where web links were opening in new Electron windows; ensure they open in the system browser instead
- refactor link clicking to avoid catching click events in renderer; handle entirely in main process on navigation request instead
- add security fixes for directory traversal and in-app link browsing
@cloverich cloverich merged commit cab25ad into master Feb 11, 2024
1 check passed
@cloverich cloverich deleted the file-links branch February 11, 2024 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant