Dylan M. Taylor d744379e60 fix(engine): refuse document URLs with shell syntax or a malformed authority ...

webbrowser on WSL hands an address to cmd.exe /c start, escaping only &
and ^, so a document link holding | (or < > " `) ran what followed it
with the viewer's authority; and an address its parser can't read is
reopened as a file path. Characters never valid in a URL unencoded are now
refused, and an http(s) authority must be made of host characters.

2026-11-03 15:46:13 +00:00

..

src

fix(engine): refuse document URLs with shell syntax or a malformed authority

2026-11-03 15:46:13 +00:00

tests/it

Resolve stored variable ids by exact id, not by variable name

2026-10-29 14:11:48 +01:00

Cargo.toml

M7: download a missing free font from the Missing fonts window (#754) (#1510)

2026-10-29 16:41:31 +07:00

clippy.toml

M8: every file a command reads by path is a regular file within a cap (#1114) (#1625)

2026-10-30 13:48:26 +07:00