Andrey Antukh ad2cd7d2dd ✨ Require re-confirmation when plugin manifest differs on open ...

When the fetched manifest differs from the stored manifest (code, name, etc.), show the permissions dialog instead of silently updating — preventing execution of tampered/injected plugins.

On fetch error, show a warning notification instead of loading with the old manifest.

Bundled plugins (no URL) skip validation as they are trusted with no remote source.

Completes the 3-layer defense for T3-N1-02: (1) closed permission schema, (2) dedicated RPC methods, (3) integrity validation on open.

AI-assisted-by: qwen3.7-plus

2026-07-30 09:54:57 +00:00

..

.storybook

…

.yarn/patches

…

dev

…

externs

…

packages

…

patches

…

playwright

…

resources

…

scripts

…

src

✨ Require re-confirmation when plugin manifest differs on open

2026-07-30 09:54:57 +00:00

test/frontend_tests

…

text-editor

…

translations

…

.prettierrc.json

…

deps.edn

…

package.json

…

playwright.config.js

…

pnpm-lock.yaml

…

pnpm-workspace.yaml

…

shadow-cljs.edn

…

stylelint.config.mjs

…

vite.config.js

…

vitest.shims.d.ts

…