tauri/.changes/rpc-security.md
2021-06-22 17:29:10 -03:00

7 lines
317 B
Markdown

---
"api": patch
"tauri": patch
---
Improve RPC security by requiring a numeric code to invoke commands. The codes are generated by the Rust side and injected into the app's code using a closure, so external scripts can't access the backend. This change doesn't protect `withGlobalTauri` (`window.__TAURI__`) usage.