tauri/.changes/scopes.md

---
"tauri": patch
---

Scopes the `filesystem` APIs from the webview access using `tauri.conf.json > tauri > allowlist > fs > scope`.
Scopes the `asset` protocol access using `tauri.conf.json > tauri > allowlist > protocol > assetScope`.
Scopes the `http` APIs from the webview access using `tauri.conf.json > tauri > allowlist > http > scope`.
Scopes the `shell` execute API from the webview access using `tauri.conf.json > tauri > allowlist > shell > scope`. Additionally, check the `tauri.conf.json > tauri > bundle > externalBin` to prevent access to unknown sidecars.
feat: scope the `fs` API and the `asset` protocol [TRI-026] [TRI-010] [TRI-011] (#10) 2022-01-09 20:26:58 +03:00			`---`
			`"tauri": patch`
			`---`

feat(core): add `http` allowlist scope [TRI-008] (#24) 2021-10-29 17:15:24 +03:00			Scopes the `filesystem` APIs from the webview access using `tauri.conf.json > tauri > allowlist > fs > scope`.
feat: scope the `fs` API and the `asset` protocol [TRI-026] [TRI-010] [TRI-011] (#10) 2022-01-09 20:26:58 +03:00			Scopes the `asset` protocol access using `tauri.conf.json > tauri > allowlist > protocol > assetScope`.
feat(core): add `http` allowlist scope [TRI-008] (#24) 2021-10-29 17:15:24 +03:00			Scopes the `http` APIs from the webview access using `tauri.conf.json > tauri > allowlist > http > scope`.
feat(core): shell execute API scope [TRI-002] (#36) * feat(core): shell execute API scope [TRI-002] * fix tests * also check with empty extension * lockfile 2021-12-01 06:05:14 +03:00			Scopes the `shell` execute API from the webview access using `tauri.conf.json > tauri > allowlist > shell > scope`. Additionally, check the `tauri.conf.json > tauri > bundle > externalBin` to prevent access to unknown sidecars.