tauri/.changes/rpc-security.md
2021-06-22 17:29:10 -03:00

317 B

api tauri
patch patch

Improve RPC security by requiring a numeric code to invoke commands. The codes are generated by the Rust side and injected into the app's code using a closure, so external scripts can't access the backend. This change doesn't protect withGlobalTauri (window.__TAURI__) usage.