V2 features/proxy to external server

[leaanthony]

Description

Added support for proxying to an external server for assets. Currently supported by Mac and Windows. Linux YMMV depending on what version of webkit2gtk is installed.

[semgrep-app]

Semgrep found 3 ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2 findings:

• v2/pkg/assetserver/assetserver_webview.go
  • L82
  • L109
  • L159

Risk: Affected versions of golang.org/x/net, golang.org/x/net/http2, and net/http are vulnerable to Uncontrolled Resource Consumption. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

Fix: Upgrade this library to at least version 0.23.0 at wails/v2/go.mod:43.

Reference(s): GHSA-4v7x-pqxf-cx7m, CVE-2023-45288

_{Ignore this finding from ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2.}

[cloudflare-pages]

Deploying wails with    Cloudflare Pages

Latest commit:	e99e93d
Status:	✅  Deploy successful!
Preview URL:	https://f976b14b.wails.pages.dev
Branch Preview URL:	https://v2-features-proxy-to-externa.wails.pages.dev

View logs

[leaanthony]

Semgrep found 3 ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2 findings:

• v2/pkg/assetserver/assetserver_webview.go

  • L82
  • L109
  • L159

Risk: Affected versions of golang.org/x/net, golang.org/x/net/http2, and net/http are vulnerable to Uncontrolled Resource Consumption. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

Fix: Upgrade this library to at least version 0.23.0 at wails/v2/go.mod:43.

Reference(s): GHSA-4v7x-pqxf-cx7m, CVE-2023-45288

Ignore this finding from ssc-46663897-ab0c-04dc-126b-07fe2ce42fb2.

Fixed