mirror of
https://github.com/sotashimozono/obsidian-remote-ssh.git
synced 2026-07-22 06:52:07 +00:00
4bcda468cf
* fix(plugin): resolve Obsidian reviewer findings (CSS, disclosure, dynamic-exec)
Non-daemon items from the community-plugin validator:
- styles.css: 6-digit hex (#000->#000000, #FFF->#FFFFFF); drop the https
scheme from the xterm.js license comment
- README: add a "Permissions & data access" disclosure (network / fs /
system identity / process exec / clipboard; states no telemetry)
- esbuild: strip ssh2's `new Function("return 2n ** 32n")()` BigInt probe
post-build, so the shipped main.js has zero Dynamic Code Execution
(eval/new Function = 0). The BigInt value is inlined; behaviour is unchanged.
Deferred to the daemon/build track: release asset split + artifact
attestation. xterm.js vendored CSS warnings (!important, text-decoration)
left as-is to avoid breaking terminal rendering.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* chore(release): bump to 1.1.1-beta.2
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* fix(plugin): address PR review (probe hard-fail, license verbatim, CI guard)
PR #373 review follow-ups:
- esbuild: hard-fail the prod build (warn on dev) when the ssh2 BigInt
probe string is not found, so a silent no-op cannot ship `new Function`
unstripped; surface the real error object in the build .catch; correct
the comment (it is ssh2's MAX_32BIT_BIGINT constant init, not a probe)
- styles.css: restore https:// in the xterm.js MIT license comment to keep
the attribution notice verbatim
- ci.yml + release.yml: add a "Dynamic code execution guard" asserting
main.js has 0 new Function / eval after the production build
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| dependabot.yml | ||
| FUNDING.yml | ||
| labeler-config.yml | ||
| pull_request_template.md | ||
| replay-skip.txt | ||