tauri/.changes/rpc-security.md

7 lines
317 B
Markdown
Raw Normal View History

---
"api": patch
"tauri": patch
---
Improve RPC security by requiring a numeric code to invoke commands. The codes are generated by the Rust side and injected into the app's code using a closure, so external scripts can't access the backend. This change doesn't protect `withGlobalTauri` (`window.__TAURI__`) usage.