Project

General

Profile

Actions

Feature #779

closed

Restrict the File Provider to a subfolder of the cache directory

Added by Soren Stoutner about 1 year ago. Updated 3 months ago.

Status:
Closed
Priority:
Next Release
Start date:
11/22/2021
Due date:
% Done:

0%

Estimated time:

Description

This provides more defense in depth. Nothing should be able to access other files anyway, because they aren't explicitly shared out. But this prevents an exploit from gaining access to the WebView cache if the other controls are somehow bypassed.

Actions

Also available in: Atom PDF