tauri@2.11.1

Ce contenu n’est pas encore disponible dans votre langue.

1b26769f9 (#15266) Enforce ACL checks for IPC requests from remote origins even when no AppManifest is configured. Previously, custom (non-plugin) commands bypassed ACL entirely without an AppManifest, allowing any origin to invoke them. Now, remote origins are always subject to ACL resolution, and can only reach custom commands if an explicit remote capability has been granted.
ba025588f Correctly handle .localhost suffix in local origins on Windows and Android to fix a security issue that made tauri think remote websites that started with a registered scheme were local websites. For example, when registering an app custom protocol, Tauri would think http://app.evil.com/ would be a local URL on Windows/Android.