mirror of
https://github.com/sotashimozono/obsidian-remote-ssh.git
synced 2026-07-22 06:52:07 +00:00
4bcda468cf
* fix(plugin): resolve Obsidian reviewer findings (CSS, disclosure, dynamic-exec)
Non-daemon items from the community-plugin validator:
- styles.css: 6-digit hex (#000->#000000, #FFF->#FFFFFF); drop the https
scheme from the xterm.js license comment
- README: add a "Permissions & data access" disclosure (network / fs /
system identity / process exec / clipboard; states no telemetry)
- esbuild: strip ssh2's `new Function("return 2n ** 32n")()` BigInt probe
post-build, so the shipped main.js has zero Dynamic Code Execution
(eval/new Function = 0). The BigInt value is inlined; behaviour is unchanged.
Deferred to the daemon/build track: release asset split + artifact
attestation. xterm.js vendored CSS warnings (!important, text-decoration)
left as-is to avoid breaking terminal rendering.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* chore(release): bump to 1.1.1-beta.2
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* fix(plugin): address PR review (probe hard-fail, license verbatim, CI guard)
PR #373 review follow-ups:
- esbuild: hard-fail the prod build (warn on dev) when the ssh2 BigInt
probe string is not found, so a silent no-op cannot ship `new Function`
unstripped; surface the real error object in the build .catch; correct
the comment (it is ssh2's MAX_32BIT_BIGINT constant init, not a probe)
- styles.css: restore https:// in the xterm.js MIT license comment to keep
the attribution notice verbatim
- ci.yml + release.yml: add a "Dynamic code execution guard" asserting
main.js has 0 new Function / eval after the production build
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| bench.yml | ||
| ci.yml | ||
| commitlint.yml | ||
| demo-capture.yml | ||
| docs.yml | ||
| e2e.yml | ||
| integration.yml | ||
| labeler.yml | ||
| release.yml | ||
| replay.yml | ||
| security.yml | ||
| sync-main-to-next.yml | ||
| version-check.yml | ||