Skip to content

Harden Finder command dispatch - #1

Open
qiuyang1995 wants to merge 3 commits into
weaiw:mainfrom
qiuyang1995:fix-command-authentication
Open

Harden Finder command dispatch#1
qiuyang1995 wants to merge 3 commits into
weaiw:mainfrom
qiuyang1995:fix-command-authentication

Conversation

@qiuyang1995

Copy link
Copy Markdown

Summary

  • remove the public quickrightmenu:// URL scheme and app URL event handler
  • require a shared command token for Finder extension command dispatch
  • restrict command directory/file permissions and stop writing command details to /tmp/QuickRightMenu.log

Testing

  • ./scripts/build.sh
  • git diff --check
  • codesign --verify --deep --strict --verbose=2 build/QuickRightMenu.app
  • verified the built app Info.plist no longer contains CFBundleURLTypes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant