dotCooCoo 91d9639e6a Plug-ins: a permission grant covers only the module that was approved ...

A grant records the module's SHA-256, but only its permissions were
compared, so a module with other bytes under a granted id inherited the
grant when it listed no new permission.

A grant now covers a module only when the id, the SHA-256 and every
listed permission match. plugin.inspect reports needsApproval for a
changed module, plugin.install refuses it without a new grant and leaves
the installed module and its grant as they are, Install Plug-in and
File > Open ask again, and the plug-in store and plug-in folders skip it.
The same bytes install again without asking, and a module with no
permissions list or an empty one needs no grant. A grant whose hash is
not 64 lower-case hexadecimal digits covers nothing.

plugin.install still trusts the client that sends grant; the docs say so.

2026-11-08 08:40:00 -08:00

..

src

Plug-ins: a permission grant covers only the module that was approved

2026-11-08 08:40:00 -08:00

tests

Tests: the Color Picker's R, G and B fields show the working RGB values

2026-11-04 13:42:00 +07:00

build.rs

…

Cargo.toml

perf(canvas): zero-copy texture upload and progressive worker frame acceptance (#4615)

2026-11-02 14:36:07 +07:00