Andrey Antukh e6bba5785f ✨ Require re-confirmation when plugin manifest differs on open ...

When the fetched manifest differs from the stored manifest
(code, name, etc.), show the permissions dialog instead of
silently updating — preventing execution of tampered/injected
plugins.

On fetch error, show a warning notification instead of loading
with the old manifest.

Bundled plugins (no URL) skip validation as they are trusted
with no remote source.

Completes the 3-layer defense for T3-N1-02: (1) closed
permission schema, (2) dedicated RPC methods, (3) integrity
validation on open.

AI-assisted-by: qwen3.7-plus

2026-08-07 16:50:25 +00:00

..

dev

♻️ Refactor internal organization of system initialization

2026-07-22 14:18:51 +02:00

resources

✨ Add proper rlimit config and propagate limit timestamp

2026-08-07 11:35:05 +02:00

scripts

✨ Add media-processor service for image and font processing (#10767)

2026-08-05 09:41:48 +02:00

src

✨ Require re-confirmation when plugin manifest differs on open

2026-08-07 16:50:25 +00:00

test

🐛 Add dedicated RPC methods for plugin registry operations

2026-08-07 18:42:26 +02:00

build.clj

🐛 Fix unexpected exception on logger caused by log4j2 plugin

2023-02-11 00:52:23 +01:00

deps.edn

🐛 Add backend password validation with complexity rules and dictionary check (#11059)

2026-08-06 10:17:14 +02:00

package.json

✨ Add Node.js E2E API tests for backend (#10787)

2026-08-05 10:15:41 +02:00

pnpm-lock.yaml

✨ Add Node.js E2E API tests for backend (#10787)

2026-08-05 10:15:41 +02:00

pnpm-workspace.yaml

⬆️ Update pnpm dependencies across all modules

2026-08-04 14:15:35 +02:00

tests.edn

🔧 Change backend test runner to kaocha

2024-05-29 19:05:04 +02:00