дзеркало
https://github.com/l0ng-ai/openidea.git
синхронізовано 2026-11-08 19:02:17 +02:00
Arnaud Ritti
04b1b863df
Closes #1947 Adds API 1.3 `fs.plugin-dir`: a persistent owner-only directory per plugin (0700 directories / 0600 files on Unix, owner-only ACL on Windows), separate from the packaged code, storage and secrets. The plugin reads and writes under it without fs.* grants, can open files there in the editor and pass their paths to approved programs; editor saves keep the protection, restart keeps the content, uninstall removes it. Traversal and symlink escapes into other plugins' directories are rejected (real-Wasm regressions). Co-authored-by: arnaud-ritti <[email protected]>
440 B
440 B
A real SDK component exercising fs.plugin-dir during activation and commands
without filesystem/project grants. large-cache writes an 80 MiB cache as ten
8 MiB files, beyond the storage quota while respecting each filesystem write limit. It only writes fake text; open opens it in
the editor and process passes its path to an explicitly approved cat.
Rebuild with plugins/build.sh crates/ide-plugin/tests/fixtures/private-dir.