Bill
d22923aedd
New localPathGrants.ts: an in-memory registry of paths the user picked in a native dialog. Every check resolves realpath + stat at grant and use time; Windows case folding; missing files, directories-as-files, devices and symlinked parents can never pass. SFTP upload/download and zmodem send/ receive now refuse renderer-supplied local paths that were never granted, returning the resolved path so callers never re-traverse a symlink. keyPath is validated as a regular file <= 1MB before reading (a device node would have blocked the UI thread forever). Tests inject a stub policy via setLocalPathPolicy; production always defaults to the real registry. Also: webPreferences now explicitly pins contextIsolation/nodeIntegration/ webSecurity instead of relying on defaults. New offline test tests/local-path-grants.mjs (37 assertions incl. symlink escape); offline suite grows to 13. i18n: 6 main.sftp/main.key error keys in 4 languages.
51 lines
2.0 KiB
JSON
51 lines
2.0 KiB
JSON
{
|
|
"name": "open-terminal",
|
|
"productName": "OpenTerminal",
|
|
"version": "1.0.20",
|
|
"description": "Open-source terminal with SSH, split panes, themes and fonts",
|
|
"main": "out/main/index.js",
|
|
"author": "CodingPlan.Site",
|
|
"license": "MIT",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "electron-vite dev",
|
|
"build": "electron-vite build",
|
|
"preview": "electron-vite preview",
|
|
"typecheck": "tsc --noEmit -p tsconfig.node.json && tsc --noEmit -p tsconfig.web.json",
|
|
"pretest": "npm run typecheck",
|
|
"test": "node tests/build-bundles.cjs && node tests/ssh-loopback.mjs && node tests/commands-store.mjs && node tests/connections-store.mjs && node tests/settings-store.mjs && node tests/local-path-grants.mjs && node tests/lock-store.mjs && node tests/lock-controller.mjs && node tests/lock-shortcuts.mjs && node tests/.hl-split-smoke.cjs && node tests/.hl-rules.cjs && node tests/zmodem-e2e.mjs && node tests/ssh-session-e2e.mjs && node tests/sysinfo-e2e.mjs",
|
|
"predist": "npm test && npm install --package-lock-only",
|
|
"dist": "electron-vite build && electron-builder --win msi nsis",
|
|
"dist:dir": "electron-vite build && electron-builder --win --dir"
|
|
},
|
|
"dependencies": {
|
|
"@lydell/node-pty": "^1.2.0-beta.15",
|
|
"@xterm/addon-fit": "^0.11.0",
|
|
"@xterm/addon-search": "^0.16.0",
|
|
"@xterm/addon-serialize": "^0.14.0",
|
|
"@xterm/addon-webgl": "^0.19.0",
|
|
"@xterm/xterm": "6.1.0-beta.304",
|
|
"antd": "^6.6.2",
|
|
"dockview-react": "^8.2.0",
|
|
"electron-updater": "^6.8.9",
|
|
"font-list": "^2.1.0",
|
|
"react": "^19.2.8",
|
|
"react-dom": "^19.2.8",
|
|
"ssh2": "^1.17.0",
|
|
"zmodem.js": "^0.1.10",
|
|
"zustand": "^5.0.15"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^24.0.0",
|
|
"@types/react": "^19.2.0",
|
|
"@types/react-dom": "^19.2.0",
|
|
"@vitejs/plugin-react": "^5.0.0",
|
|
"electron": "^44.2.0",
|
|
"electron-builder": "^26.15.3",
|
|
"electron-vite": "^5.0.0",
|
|
"esbuild": "^0.25.12",
|
|
"typescript": "~5.9.0",
|
|
"vite": "^7.0.0"
|
|
}
|
|
}
|