Files
figcraft/crates/engine
Dylan M. Taylor c673996fe7 fix(engine): install a directory plugin only with the permissions that were shown
The confirmation showed the directory entry's access and commands, but the
downloaded bundle's manifest was registered as is, so a directory could
show a read-only plugin and install one that edits the document. A manifest
asking for more than the entry showed is refused before it is saved.
2026-11-03 15:46:01 +00:00
..