8 Commits

Include renames

Author	SHA1	Message	Date
Ian Chua	f6f68573b6	fix: add resources folder to the allowed roots as readonly	2026-08-14 14:48:57 +08:00
Ian Chua	ddd62e25df	add audit hook for fs, network and processes	2026-08-13 19:16:18 +08:00
Ian Chua	81b06d68f1	feat: initial plugin auditing workflow	2026-07-28 17:11:54 +08:00
SoftFever	88fb89b5eb	Plugin audit (#14821) ... * Block plugins from reading or writing app config and cloud credentials Add a denied-filename registry to the plugin audit sandbox, seeded with OrcaSlicer's config (.conf/.ini) and the cloud refresh-token file. The deny is checked above the loading-mode read exemption and the allowed roots, so a plugin cannot reach these files even though they sit inside data_dir(), which is itself an allowed root. Case-insensitive prefix matching also covers the .bak/.tmp companions that hold the same data, and os.rename/os.remove are hooked alongside open so the files cannot be deleted or clobbered either.	2026-07-18 01:24:44 +08:00
Ian Chua	4c60781cf4	fix: merge branch feat/plugin-feature	2026-07-17 14:02:10 +08:00
Ian Chua	d9f8460a4e	fix: merge PythonFileUtils into PluginFsUtils	2026-07-16 20:40:32 +08:00
Ian Chua	18388ffb6d	feat: plugins config	2026-07-10 20:00:01 +08:00
Ian Chua	ecddf3d18f	feat: Python Plugins	2026-07-02 17:49:36 +08:00