[Fix]: Extension registry is fetched over plain HTTP (MITM risk)

[matiaspalmac]

Describe the fix

apps/desktop/src/context/ExtensionContext.tsx:73 fetches the extension catalog from http://raw.githubusercontent.com/.... Plain HTTP allows a network attacker to inject arbitrary repository/data entries, which are then passed to install_extension and cloned.

Proposed fix:

1. Force https:// for any registryUrl value (reject on schema mismatch).
2. Validate the response domain against an allowlist (e.g., raw.githubusercontent.com).
3. Optionally sign the catalog JSON and verify in Rust before consuming it.

Context / Problem

Combined with the git_url issue on install, an HTTP MITM upgrades directly to RCE during extension installation. HTTPS is free and removes this class of attacks.

Trixty Version

v1.0.10

What operating system are you using?

Windows

Would you like to implement this fix yourself by sending a PR?

Maybe