Thomas Weber
0cb82afe62
Query security manager extension permissions concurrently ( #400 )
2026-10-31 15:32:29 -05:00
Thomas Weber
984b4f4365
Always reject javascript: URLs in canEmbed
2026-10-23 22:39:44 -05:00
Thomas Weber
7387fa0883
Replace tap with node:test ( #393 )
2026-10-18 14:43:49 -05:00
Thomas Weber
fdd954c012
Add URL argument to Scratch.canDownload
...
This lets us filter out javascript: URLs
2024-12-22 17:46:09 -06:00
Thomas Weber
1a578aa44e
Add canDownload API
...
https://github.com/TurboWarp/scratch-gui/issues/969
2024-12-22 11:51:26 -06:00
Muffin
9f26069ad6
merge-upstream: Fix ESLint errors
2023-12-22 17:56:40 -06:00
Muffin
c9f93b9de7
Resolve relative Scratch.canEmbed() URLs before sending to security manager
2023-12-03 18:03:53 -06:00
Muffin
6399562b90
Revert running unsandboxed extensions with fetch() and new AsyncFunction instead of <script>
...
It causes other issues:
- It *will* break projects
- Stack traces from errors in extensions are unusable
- We do not even get some of the originally intended benefits like parallel loading
2023-08-22 11:24:20 -05:00
Muffin
683620994f
Fix tests
2023-08-22 10:43:04 -05:00
GarboMuffin
2a002f62eb
Add Scratch.fetch, Scratch.openWindow, Scratch.redirect
2023-02-12 02:45:25 -06:00
GarboMuffin
fd3b675466
Test that extension permission APIs handle non-string URLs
2023-02-11 19:00:14 -06:00
GarboMuffin
5ccaee81d3
Scratch.canFetchResource -> Scratch.canFetch
2023-02-11 18:15:59 -06:00
GarboMuffin
795ceb1fb3
Add Scratch.canOpenWindow and Scratch.canRedirect
2023-02-11 18:12:11 -06:00
GarboMuffin
58d7bc269c
Add Scratch.canFetchResource API
2023-02-11 17:25:09 -06:00
GarboMuffin
dcc0d961d7
Automatically load custom extensions saved in project
...
Requires disabled-by-default security manager configuration
2022-10-22 22:02:30 -05:00
Thomas Weber