jpmschweitzerandClaude Opus 4.8
7171a09fc2
A clide:// link is an untrusted external vector (any webpage can fire one), so it no longer translates to a command in parseArgv. It routes the raw URL to a new builtin.deeplink handler that is doubly defensive: a default-deny allowlist (kDeepLinkSafeActions — only the read-only 'open' verb; run/git/write/passthrough rejected) AND a mandatory 'an external link wants to: … allow?' confirmation before anything runs. Records the security boundary as D-90. The earlier silent editor.open passthrough is replaced; open still works, now behind the prompt. Tests cover the allowlist (the boundary) + the gating. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
6 lines
124 B
Dart
6 lines
124 B
Dart
/// Built-in `clide://` deep-link handler (T-56, D-90).
|
|
library;
|
|
|
|
export 'src/deep_link.dart';
|
|
export 'src/extension.dart';
|