дзеркало
https://github.com/l0ng-ai/openidea.git
синхронізовано 2026-11-09 11:15:40 +02:00
Arnaud Ritti
04b1b863df
Closes #1947 Adds API 1.3 `fs.plugin-dir`: a persistent owner-only directory per plugin (0700 directories / 0600 files on Unix, owner-only ACL on Windows), separate from the packaged code, storage and secrets. The plugin reads and writes under it without fs.* grants, can open files there in the editor and pass their paths to approved programs; editor saves keep the protection, restart keeps the content, uninstall removes it. Traversal and symlink escapes into other plugins' directories are rejected (real-Wasm regressions). Co-authored-by: arnaud-ritti <[email protected]>
7 рядки
440 B
Markdown
7 рядки
440 B
Markdown
A real SDK component exercising `fs.plugin-dir` during activation and commands
|
|
without filesystem/project grants. `large-cache` writes an 80 MiB cache as ten
|
|
8 MiB files, beyond the storage quota while respecting each filesystem write limit. It only writes fake text; `open` opens it in
|
|
the editor and `process` passes its path to an explicitly approved `cat`.
|
|
|
|
Rebuild with `plugins/build.sh crates/ide-plugin/tests/fixtures/private-dir`.
|