BFlat 69806c9edd Plugins: refuse file and network access through path params and collab (#723) ...

Plugins can no longer reach the disk or network through path parameters (variable.export/codeConnect.export/component.playground writes, codeConnect.import/variable.import reads) or through collab.* and window.*; found and fixed by @lucasmartins-ai, split out of #696.

2026-10-17 13:35:00 +07:00

..

cmd

M1: convert frames to sections and sections to frames (#719) (#721)

2026-10-17 13:03:49 +07:00

templates

M11: starter templates: eight templates built in code, template.list and file.newFromTemplate, help.gettingStarted

2026-10-13 03:01:19 +07:00

vectoredit

Merge branch 'pr-556' into batch/t5

2026-10-16 01:36:05 +07:00

a11y_keys_tests.rs

…

al_behaviour_tests.rs

…

al_content_align_tests.rs

M2: auto layout: wrapped-line alignment

2026-10-13 13:36:54 +07:00

al_drag_tests.rs

…

al_keys_tests.rs

Fix cross-axis arrows and drop slot on single-item wrapped lines

2026-10-15 15:17:21 +02:00

al_keys.rs

…

al_nesting_tests.rs

…

annotation_categories_tests.rs

…

annotations_tests.rs

…

annotations.rs

…

arc_fields_tests.rs

…

arc_handles_tests.rs

…

arc_handles.rs

…

autosave_tests.rs

#305: save a file from a snapshot encoded elsewhere

2026-10-15 18:11:52 +07:00

background_tests.rs

M9: share with a join code: stop sharing keeps the file

2026-10-12 19:42:28 +07:00

background.rs

M11: plugin installs saved at once; directory and library requests off the UI thread

2026-10-12 06:15:00 +07:00

batch_rollback_tests.rs

Keep the redo steps when a failed command batch rolls back (#196)

2026-10-14 16:14:35 +02:00

batch_step_ref_tests.rs

#400: a nested batch keeps its own step references

2026-10-15 18:30:05 +07:00

binding_lists_tests.rs

…

booleans_tests.rs

…

booleans.rs

…

branch_tests.rs

M8: branch version history and finer list merges

2026-10-12 02:30:25 +07:00

branch_versions_tests.rs

M8: branch version history and finer list merges

2026-10-12 02:30:25 +07:00

branches.rs

fix(recovery): keep the version history and branches in recovery copies (#185)

2026-10-14 13:41:17 -05:00

brush_tests.rs

…

canvas_fixes_tests.rs

…

catalog.rs

M1: full screen (#227) (#238)

2026-10-14 10:31:59 +07:00

code_connect_tests.rs

feat(dev-mode): Leptos code with component properties, instance calls and Code Connect (#240)

2026-10-14 10:32:14 +07:00

code_connect.rs

feat(dev-mode): Leptos code with component properties, instance calls and Code Connect (#240)

2026-10-14 10:32:14 +07:00

codegen.rs

Keep layer text and string defaults unchanged in rem code output

2026-10-15 11:08:53 +02:00

collab_ids_tests.rs

…

collab_live_tests.rs

M9: live sessions per document

2026-10-12 17:54:18 +07:00

collab_tests.rs

…

collab_undo_tests.rs

…

collab.rs

…

comments_polish_tests.rs

…

component_codegen_tests.rs

Give case-colliding variant properties distinct data attributes

2026-10-15 10:57:13 +02:00

component_codegen.rs

Give case-colliding variant properties distinct data attributes

2026-10-15 10:57:13 +02:00

components_behaviour_tests.rs

M3: components behaviour suite and fixes

2026-10-12 00:57:43 +07:00

components_scale_tests.rs

M7: headless renders use system fonts

2026-10-12 09:32:42 +07:00

components_tests.rs

M3: components behaviour suite and fixes

2026-10-12 00:57:43 +07:00

components.rs

text: scripted text stores CRLF, CR, U+2028 and U+2029 as LF like the editor (#427)

2026-10-15 17:20:58 +02:00

convert_container_tests.rs

M1: convert frames to sections and sections to frames (#719) (#721)

2026-10-17 13:03:49 +07:00

cursor_tests.rs

Pen tool: a click's small wobble pulls out no handle

2026-10-15 08:11:40 -04:00

dark_page_text_tests.rs

fix(engine): new text is readable on the frame it is drawn in (#362)

2026-10-14 18:35:21 -05:00

dev_resources_tests.rs

M7: dev resources links

2026-10-12 02:30:25 +07:00

dev_resources.rs

M7: dev resources links

2026-10-12 02:30:25 +07:00

devcompare_tests.rs

…

devcompare.rs

…

devfocus_tests.rs

Keep nested frames out of the ready-for-dev list (fixes #455)

2026-10-15 13:29:22 +02:00

devinspect_tests.rs

…

devinspect.rs

Keep nested frames out of the ready-for-dev list (fixes #455)

2026-10-15 13:29:22 +02:00

distance.rs

M1: canvas navigation, guides and grids behaviour suite and fixes

2026-10-12 01:32:04 +07:00

double_click_tests.rs

Merge main and the community batch into #280

2026-10-15 18:28:18 +07:00

draw_tools_tests.rs

M4: text lists, hanging punctuation and decoration styles

2026-10-12 02:09:10 +07:00

drop.rs

Fix cross-axis arrows and drop slot on single-item wrapped lines

2026-10-15 15:17:21 +02:00

duplicate_spacing_tests.rs

fix(engine): Alt-drag copies snap to their original; Duplicate repeats the step

2026-10-14 18:03:48 +07:00

effects_tests.rs

Reject negative or fractional index in effect.set, export.update and export.remove

2026-10-15 01:08:36 +00:00

export_behaviour_tests.rs

M7: export and inspect behaviour suite and fixes

2026-10-12 01:32:04 +07:00

export_depth_tests.rs

Refuse incomplete SVG/PDF exports beyond the depth limit (#218)

2026-10-14 05:23:28 +07:00

extended_chain_tests.rs

M3: extended collections tail

2026-10-12 02:30:25 +07:00

fig_export_assets_tests.rs

M7: imported nested instances link to their main's layers

2026-10-13 10:05:39 +07:00

fig_export_tests.rs

M6: experimental .fig export

2026-10-12 07:19:57 +07:00

fig_import_tests.rs

…

frame_guides_tests.rs

…

frame_label_tests.rs

…

frame_tests.rs

…

frames_behaviour_tests.rs

M1: frames, groups, sections and masks behaviour suite and fixes

2026-10-12 00:57:43 +07:00

fx_behaviour_tests.rs

M3: paint and effects behaviour suite and fixes

2026-10-12 01:32:04 +07:00

gesture_preview_tests.rs

…

gradient_shorthand_tests.rs

fix(engine): read the documented gradient shorthand on every route (#252)

2026-10-14 01:02:45 -05:00

guard.rs

…

guides.rs

M1: canvas navigation, guides and grids behaviour suite and fixes

2026-10-12 01:32:04 +07:00

hide_publishing_tests.rs

M1: Hide when publishing from the Assets panel

2026-10-13 00:29:41 +07:00

history_behaviour_tests.rs

M8: branch version history and finer list merges

2026-10-12 02:30:25 +07:00

html_codegen_tests.rs

Keep layer text and string defaults unchanged in rem code output

2026-10-15 11:08:53 +02:00

import_export_tests.rs

M7: export and inspect behaviour suite and fixes

2026-10-12 01:32:04 +07:00

inspect_behaviour_tests.rs

M7: export and inspect behaviour suite and fixes

2026-10-12 01:32:04 +07:00

inspect.rs

M7: dev resources links

2026-10-12 02:30:25 +07:00

interaction_rollback_tests.rs

fix(engine): roll back failed commands during interactions too

2026-10-14 12:54:02 +02:00

invite_links_tests.rs

…

invite_links.rs

…

keymap_tests.rs

engine: long digit strings no longer overflow object.opacityKeys

2026-10-14 23:22:41 +03:00

keymap.rs

M1: full screen (#227) (#238)

2026-10-14 10:31:59 +07:00

lib.rs

Merge branch 'rb-560' into batch/t6

2026-10-16 02:36:56 +07:00

library_range_styles_tests.rs

Keep character-range text styles when publishing and placing components

2026-10-15 16:31:53 +02:00

library_server_tests.rs

…

library_server.rs

M9: live sessions per document

2026-10-12 17:54:18 +07:00

library_swap_tests.rs

…

library_swap.rs

…

library_tests.rs

…

library_variables_tests.rs

Point library style variable bindings at imported library variables

2026-10-15 16:47:58 +02:00

library.rs

Merge branch 'pr-547' into batch/t5

2026-10-16 01:36:02 +07:00

line_endings_tests.rs

text: scripted text stores CRLF, CR, U+2028 and U+2029 as LF like the editor (#427)

2026-10-15 17:20:58 +02:00

live_access_tests.rs

fix(collab): reject reverting an active live document (#214)

2026-10-14 05:47:39 +07:00

live_docs_tests.rs

M9: live sessions per document

2026-10-12 17:54:18 +07:00

live_share_tests.rs

Sharing: the default server is a build-time setting

2026-10-13 03:01:34 +07:00

live_signal_tests.rs

M9: live sessions per document

2026-10-12 17:54:18 +07:00

live_tests.rs

#338: drop the start/end feat marker comments

2026-10-15 18:37:52 +07:00

live.rs

#338: drop the start/end feat marker comments

2026-10-15 18:37:52 +07:00

mask_tests.rs

…

masks_behaviour_tests.rs

M1: frames, groups, sections and masks behaviour suite and fixes

2026-10-12 00:57:43 +07:00

measure_tests.rs

fix(engine): Alt-drag copies snap to their original; Duplicate repeats the step

2026-10-14 18:03:48 +07:00

measure.rs

…

menu_gaps_tests.rs

M7: recent files as thumbnail cards on the home screen (#249)

2026-10-14 12:00:20 +07:00

nested_override_tests.rs

…

online_tests.rs

M9: online files: crash recovery never drops an unsent edit

2026-10-13 01:41:14 +07:00

online.rs

M9: online files: crash recovery never drops an unsent edit

2026-10-13 01:41:14 +07:00

open_issues_tests.rs

Reject negative or fractional index in file.close

2026-10-16 00:19:49 +02:00

outline_options_tests.rs

M1: cursors per tool and modifier, panel widths, outline options, dark pages

2026-10-13 00:29:41 +07:00

page_copy_navigation_tests.rs

Point duplicated page navigation at the copied frames

2026-10-15 17:10:00 +02:00

page_target_tests.rs

Reject layer IDs as targets of page.rename, delete and setBackground

2026-10-15 13:44:17 +02:00

paint_reorder_tests.rs

M3: styles and variables behaviour suite and fixes

2026-10-12 00:57:43 +07:00

paint_tests.rs

…

panels_behaviour_tests.rs

Merge branch 'pr-517' into batch/t5

2026-10-16 01:35:45 +07:00

params.rs

fix(engine): read the documented gradient shorthand on every route (#252)

2026-10-14 01:02:45 -05:00

pdf_print_tests.rs

…

pen_overlay_tests.rs

fix(pen): show the bezier handles while drawing

2026-10-14 16:58:51 +07:00

pixel_preview_tests.rs

…

playground_tests.rs

M3: component playground: variant, boolean and text properties

2026-10-13 13:36:54 +07:00

playground.rs

M3: component playground: variant, boolean and text properties

2026-10-13 13:36:54 +07:00

plugin_directory_tests.rs

M9: live sessions per document

2026-10-12 17:54:18 +07:00

plugin_directory.rs

M11: plugin installs saved at once; directory and library requests off the UI thread

2026-10-12 06:15:00 +07:00

plugin_panels_tests.rs

M11: plugin installs saved at once; directory and library requests off the UI thread

2026-10-12 06:15:00 +07:00

plugins_tests.rs

Plugins: refuse file and network access through path params and collab (#723)

2026-10-17 13:35:00 +07:00

plugins.rs

Plugins: refuse file and network access through path params and collab (#723)

2026-10-17 13:35:00 +07:00

progressive_blur_tests.rs

…

proto_behaviour_tests.rs

M5: prototyping behaviour suite and fixes

2026-10-12 00:57:43 +07:00

proto_conditional_tests.rs

…

proto_delay_tests.rs

M5: prototyping: delays on mouse triggers, manual overlay offsets

2026-10-13 13:36:54 +07:00

proto_multi_tests.rs

…

proto_polish_tests.rs

…

proto_present_tests.rs

…

proto_responsive_tests.rs

…

proto_run_tests.rs

…

proto_run.rs

M3: variables inside styles

2026-10-13 13:36:54 +07:00

proto_tail_tests.rs

M5: prototyping tail: gamepad triggers, widgets in prototypes, mode lookups

2026-10-12 05:28:53 +07:00

rename.rs

M1: layers and assets panels behaviour suite and fixes

2026-10-12 03:47:34 +07:00

retained_walk_tests.rs

…

rotated_guides_tests.rs

…

rotated_select_tests.rs

…

rotation_origin_tests.rs

M1: rotation origin and place-with-Enter shortcuts

2026-10-12 07:53:24 +07:00

rotation_origin.rs

M1: rotation origin and place-with-Enter shortcuts

2026-10-12 07:53:24 +07:00

scale_tool_tests.rs

…

section_contents_tests.rs

…

section_tests.rs

…

select_area_tests.rs

M1: layers panel keyboard (box selection, F2 rename, context menu) and stroke styles (#135)

2026-10-11 23:10:41 +07:00

selection_behaviour_tests.rs

…

selection_depth_tests.rs

…

shape_handles_tests.rs

M4: shapes and vector behaviour suite and fixes

2026-10-12 01:32:04 +07:00

shape_handles.rs

M4: shapes and vector behaviour suite and fixes

2026-10-12 01:32:04 +07:00

shapebuilder_strokes_tests.rs

…

shapebuilder_tests.rs

…

shapebuilder.rs

Include empty outlines in no-op shapeBuilder.merge response

2026-10-15 14:36:34 +02:00

shapes_behaviour_tests.rs

Outline stroke on every selected layer, not just the first

2026-10-15 03:41:17 +02:00

shortcut_parity_tests.rs

M1: full screen (#227) (#238)

2026-10-14 10:31:59 +07:00

slot_tests.rs

…

snap.rs

fix(engine): Alt-drag copies snap to their original; Duplicate repeats the step

2026-10-14 18:03:48 +07:00

stroke_style_tests.rs

M1: layers panel keyboard (box selection, F2 rename, context menu) and stroke styles (#135)

2026-10-11 23:10:41 +07:00

style_tests.rs

…

style_vars_tests.rs

M3: variables inside styles

2026-10-13 13:36:54 +07:00

style_vars.rs

M3: variables inside styles

2026-10-13 13:36:54 +07:00

styles_behaviour_tests.rs

M3: styles and variables behaviour suite and fixes

2026-10-12 00:57:43 +07:00

svg_import_tests.rs

…

synthetic_ds.rs

M3: variables inside styles

2026-10-13 13:36:54 +07:00

synthetic.rs

Keep a Rectangle in the smallest synthetic perf documents

2026-10-15 14:23:20 +02:00

templates_tests.rs

M11: starter templates: eight templates built in code, template.list and file.newFromTemplate, help.gettingStarted

2026-10-13 03:01:19 +07:00

tests.rs

#361: a replacement that only changes the case replaces every occurrence; the text's chars are collected once

2026-10-15 18:54:50 +07:00

text_behaviour_tests.rs

#363: a dragged text box keeps the drag's width and height

2026-10-15 18:25:06 +07:00

text_fill_tests.rs

…

text_metrics_local_tests.rs

M3: text metrics: whole-pixel line heights, advances on a 1024-per-em grid, letter spacing between glyphs only

2026-10-12 17:54:18 +07:00

text_motion_tests.rs

…

text_style_picker_tests.rs

…

text_tail_tests.rs

M4: text lists, hanging punctuation and decoration styles

2026-10-12 02:09:10 +07:00

textedit.rs

Merge main into #560; normalise the replacement where findReplace reads it

2026-10-16 02:31:34 +07:00

textpreview.rs

…

theme_pages_tests.rs

Keep flows, prototype settings and guides when duplicating a page (#417)

2026-10-15 17:19:38 +02:00

tiff_tests.rs

…

tools.rs

Merge branch 'pr-522' into batch/t5

2026-10-16 01:35:52 +07:00

transform_behaviour_tests.rs

Merge #388: Keep corner resize cursors diagonal on wide and tall layers (@Silvertree2010)

2026-10-15 15:08:52 +07:00

variable_tests.rs

…

variables_behaviour_tests.rs

M3: styles and variables behaviour suite and fixes

2026-10-12 00:57:43 +07:00

variables_editor_tests.rs

Refuse to create a variable collection with a name that is already taken (#416)

2026-10-15 17:17:44 +02:00

variables_io_tests.rs

…

vector_behaviour_tests.rs

M4: shapes and vector behaviour suite and fixes

2026-10-12 01:32:04 +07:00

vector_multi_behaviour_tests.rs

M4: vector multi-edit and edit tail

2026-10-12 02:52:18 +07:00

vectoredit.rs

Vector edit mode: hover, hatch, select and drag filled regions (#243)

2026-10-14 11:17:17 +07:00

version_preview_tests.rs

…

version_tests.rs

M8: comments and version history behaviour suite and fixes

2026-10-12 02:09:10 +07:00

view_behaviour_tests.rs

Keep the selected guide selected when an earlier guide is removed (#418)

2026-10-15 17:18:38 +02:00

widgets_tests.rs

M5: prototyping tail: gamepad triggers, widgets in prototypes, mode lookups

2026-10-12 05:28:53 +07:00

widgets.rs

M5: prototyping tail: gamepad triggers, widgets in prototypes, mode lookups

2026-10-12 05:28:53 +07:00