6975d0cdda
* Constrain Splash external I/O to the host service bridge * Validate untrusted Splash source with the host I/O restriction * Give strict Splash validation a disposable storage jail * Close the remaining ways out of the Splash host I/O restriction - Keep CachedWidget singletons per heap, and don't register CachedWidget or WindowMenu in restricted isolates. - Don't emit Html/Markdown link URLs as actions from a restricted isolate, and ignore its menu bar updates. - Suppress clipboard copy/cut hits for any restricted isolate, not only within Splash. - Give script calls made while an isolate is installed the same budget. - On web, let package resource fetches skip the guest I/O guard. - Name the validation jail without the wall clock, and skip it on wasm. - Make the host I/O tests fail when their guards are removed. |
||
|---|---|---|
| .. | ||
| src | ||
| tests | ||
| Cargo.toml | ||