Skip to content

0.9.7

Choose a tag to compare

@obinnanwachukwu1 obinnanwachukwu1 released this 19 Jun 19:42
· 787 commits to main since this release

Added

  • Added pinned C++ browser toolchain integrity manifests so consumers can host large YOWASP assets on a remote HTTPS origin while requiring exact SHA-256 digests before execution.

Fixed

  • Replaced the C++ browser worker same-origin-only assumption with a stricter trust model: same-origin assets remain allowed, while cross-origin compiler bundles and WASM/sysroot assets must match an exact manifest entry.
  • Loaded pinned remote C++ compiler bundles through verified Blob modules and rewrote their import.meta.url base so secondary YOWASP fetches are also checked against the same manifest.