deblan-mirror/wails
1
0
Fork 0
mirror of https://github.com/wailsapp/wails.git synced 2026-03-14 22:55:48 +01:00
Code Issues Projects Releases Packages Wiki Activity
wails/v3
History
Exact
Lea Anthony 3c503f162e fix(security): prevent path traversal in screen example 
The asset middleware in the screen example was vulnerable to path traversal
attacks. User-provided URL paths were concatenated directly with the base
directory without validation, allowing attackers to use `../` sequences to
access files outside the intended assets directory.

Changes:
- Use filepath.Join for safe path construction
- Clean paths with filepath.Clean to normalize them
- Validate that the resolved path stays within the assets directory
- Reject requests that would escape the assets directory

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-22 06:04:26 +11:00
..
cmd/wails3 chore: disable setup wizard from CLI 2025-12-14 07:23:49 +11:00
examples fix(security): prevent path traversal in screen example 2026-01-22 06:04:26 +11:00
internal chore(v3): bump to v3.0.0-alpha.61 and update changelog [skip ci] 2026-01-20 02:48:15 +00:00
pkg fix(windows): skip DPI awareness API call when already set via manifest (#4811) 2026-01-21 19:23:56 +11:00
scripts Add clean v3 changelog validation workflow with external Go script 2025-07-13 10:33:00 +10:00
tasks feat: adapt iOS and Android message processors to RuntimeRequest transport 2025-12-10 21:27:04 +11:00
test fix: prevent window menu crash on Wayland (#4769) (#4770) 2025-12-12 17:59:47 +11:00
test-assets Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
tests/window-visibility-test feat(linux): generate .desktop file during build (#4575) (#4780) 2025-12-13 12:22:59 +11:00
wep [WEP] Customise Window Titlebars (#3508) 2024-06-08 13:42:27 +10:00
.gitignore Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
.prettierignore chore: add Prettier as format tool (#2689) 2023-05-30 07:40:54 +10:00
.prettierrc.yml chore: add Prettier as format tool (#2689) 2023-05-30 07:40:54 +10:00
ANDROID_ARCHITECTURE.md feat: Add Android support for Wails v3 2025-11-28 21:06:59 +11:00
build_ios.sh Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
fix-darwin-ios-constraints.sh Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
go.mod fix(v3): revert goccy/go-json to stdlib encoding/json to fix Windows panic (#4859) 2026-01-05 08:26:35 +11:00
go.sum fix(v3): revert goccy/go-json to stdlib encoding/json to fix Windows panic (#4859) 2026-01-05 08:26:35 +11:00
IOS_ARCHITECTURE.md Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
IOS_FEATURES_TODO.md Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
IOS_RUNTIME.md Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
old Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
README.md Update doc dependencies 2023-09-08 10:57:47 +10:00
release-notes.txt v3.0.0-alpha.26 2025-08-24 02:40:05 +00:00
release_notes.md v3.0.0-alpha.26 2025-08-24 02:40:05 +00:00
Taskfile.yaml fix(v3): overhaul drag-and-drop for Linux reliability and simplify Windows implementation (#4848) 2026-01-04 11:08:29 +11:00
test-ios-compilation.go Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
test-new-ios-build.sh Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00
TESTING.md feat: Complete App API restructuring with organized manager pattern (#4359) 2025-06-21 19:51:14 +10:00
UNRELEASED_CHANGELOG.md fix(windows): skip DPI awareness API call when already set via manifest (#4811) 2026-01-21 19:23:56 +11:00
verify-ios-setup.sh Merge iOS support from v3-alpha-feature/ios-support 2025-12-10 18:34:21 +11:00

README.md

v3 Alpha

Thanks for wanting to help out with testing/developing Wails v3! This guide will help you get started.

Getting Started

All the instructions for getting started are in the v3 documentation directory: mkdocs-website. Please read the README.md file in that directory for more information.