|
37 | 37 | ], |
38 | 38 | "definitions": { |
39 | 39 | "Capability": { |
40 | | - "description": "A grouping and boundary mechanism developers can use to isolate access to the IPC layer.\n\nIt controls application windows' and webviews' fine grained access to the Tauri core, application, or plugin commands. If a webview or its window is not matching any capability then it has no access to the IPC layer at all.\n\nThis can be done to create groups of windows, based on their required system access, which can reduce impact of frontend vulnerabilities in less privileged windows. Windows can be added to a capability by exact name (e.g. `main-window`) or glob patterns like `*` or `admin-*`. A Window can have none, one, or multiple associated capabilities.\n\n## Example\n\n```json { \"identifier\": \"main-user-files-write\", \"description\": \"This capability allows the `main` window on macOS and Windows access to `filesystem` write related commands and `dialog` commands to enable programatic access to files selected by the user.\", \"windows\": [ \"main\" ], \"permissions\": [ \"core:default\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] }, ], \"platforms\": [\"macOS\",\"windows\"] } ```", |
| 40 | + "description": "A grouping and boundary mechanism developers can use to isolate access to the IPC layer.\n\nIt controls application windows' and webviews' fine grained access to the Tauri core, application, or plugin commands. If a webview or its window is not matching any capability then it has no access to the IPC layer at all.\n\nThis can be done to create groups of windows, based on their required system access, which can reduce impact of frontend vulnerabilities in less privileged windows. Windows can be added to a capability by exact name (e.g. `main-window`) or glob patterns like `*` or `admin-*`. A Window can have none, one, or multiple associated capabilities.\n\n## Example\n\n```json { \"identifier\": \"main-user-files-write\", \"description\": \"This capability allows the `main` window on macOS and Windows access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.\", \"windows\": [ \"main\" ], \"permissions\": [ \"core:default\", \"dialog:open\", { \"identifier\": \"fs:allow-write-text-file\", \"allow\": [{ \"path\": \"$HOME/test.txt\" }] }, ], \"platforms\": [\"macOS\",\"windows\"] } ```", |
41 | 41 | "type": "object", |
42 | 42 | "required": [ |
43 | 43 | "identifier", |
|
49 | 49 | "type": "string" |
50 | 50 | }, |
51 | 51 | "description": { |
52 | | - "description": "Description of what the capability is intended to allow on associated windows.\n\nIt should contain a description of what the grouped permissions should allow.\n\n## Example\n\nThis capability allows the `main` window access to `filesystem` write related commands and `dialog` commands to enable programatic access to files selected by the user.", |
| 52 | + "description": "Description of what the capability is intended to allow on associated windows.\n\nIt should contain a description of what the grouped permissions should allow.\n\n## Example\n\nThis capability allows the `main` window access to `filesystem` write related commands and `dialog` commands to enable programmatic access to files selected by the user.", |
53 | 53 | "default": "", |
54 | 54 | "type": "string" |
55 | 55 | }, |
|
1016 | 1016 | "const": "core:webview:allow-reparent", |
1017 | 1017 | "markdownDescription": "Enables the reparent command without any pre-configured scope." |
1018 | 1018 | }, |
| 1019 | + { |
| 1020 | + "description": "Enables the set_webview_auto_resize command without any pre-configured scope.", |
| 1021 | + "type": "string", |
| 1022 | + "const": "core:webview:allow-set-webview-auto-resize", |
| 1023 | + "markdownDescription": "Enables the set_webview_auto_resize command without any pre-configured scope." |
| 1024 | + }, |
1019 | 1025 | { |
1020 | 1026 | "description": "Enables the set_webview_background_color command without any pre-configured scope.", |
1021 | 1027 | "type": "string", |
|
1118 | 1124 | "const": "core:webview:deny-reparent", |
1119 | 1125 | "markdownDescription": "Denies the reparent command without any pre-configured scope." |
1120 | 1126 | }, |
| 1127 | + { |
| 1128 | + "description": "Denies the set_webview_auto_resize command without any pre-configured scope.", |
| 1129 | + "type": "string", |
| 1130 | + "const": "core:webview:deny-set-webview-auto-resize", |
| 1131 | + "markdownDescription": "Denies the set_webview_auto_resize command without any pre-configured scope." |
| 1132 | + }, |
1121 | 1133 | { |
1122 | 1134 | "description": "Denies the set_webview_background_color command without any pre-configured scope.", |
1123 | 1135 | "type": "string", |
|
2073 | 2085 | "markdownDescription": "Denies the unminimize command without any pre-configured scope." |
2074 | 2086 | }, |
2075 | 2087 | { |
2076 | | - "description": "# Tauri `serialport` default permissions\n\nThis configuration file defines the default permissions granted\nto the serialport.\n\n### Granted Permissions\n\nThis default permission set enables all read-related commands and\nallows access to the `$APP` folder and sub directories created in it.\nThe location of the `$APP` folder depends on the operating system,\nwhere the application is run.\n\nIn general the `$APP` folder needs to be manually created\nby the application at runtime, before accessing files or folders\nin it is possible.\n\n### Denied Permissions\n\nThis default permission set prevents access to critical components\nof the Tauri application by default.\nOn Windows the webview data folder access is denied.\n\n\n#### This default permission set includes:\n\n- `allow-managed-ports`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-cancel-read`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-open`\n- `allow-read`\n- `allow-write`\n- `allow-write-binary`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-bytes-to-read`\n- `allow-bytes-to-write`\n- `allow-cancel-read`\n- `allow-clear-break`\n- `allow-clear-buffer`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-managed-ports`\n- `allow-open`\n- `allow-read`\n- `allow-read-binary`\n- `allow-read-carrier-detect`\n- `allow-read-cd`\n- `allow-read-clear-to-send`\n- `allow-read-cts`\n- `allow-read-data-set-ready`\n- `allow-read-dsr`\n- `allow-read-dtr`\n- `allow-read-ri`\n- `allow-read-ring-indicator`\n- `allow-set-baud-rate`\n- `allow-set-break`\n- `allow-set-data-bits`\n- `allow-set-flow-control`\n- `allow-set-parity`\n- `allow-set-stop-bits`\n- `allow-set-timeout`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-write`\n- `allow-write-binary`\n- `allow-write-data-terminal-ready`\n- `allow-write-dtr`\n- `allow-write-request-to-send`\n- `allow-write-rts`", |
| 2088 | + "description": "# Tauri `serialport` default permissions\n\nThis configuration file defines the default permissions granted\nto the serialport.\n\n### Granted Permissions\n\nThis default permission set enables all read-related commands and\nallows access to the `$APP` folder and sub directories created in it.\nThe location of the `$APP` folder depends on the operating system,\nwhere the application is run.\n\nIn general the `$APP` folder needs to be manually created\nby the application at runtime, before accessing files or folders\nin it is possible.\n\n### Denied Permissions\n\nThis default permission set prevents access to critical components\nof the Tauri application by default.\nOn Windows the webview data folder access is denied.\n\n\n#### This default permission set includes:\n\n- `allow-managed-ports`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-cancel-read`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-open`\n- `allow-read`\n- `allow-write`\n- `allow-write-binary`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-bytes-to-read`\n- `allow-bytes-to-write`\n- `allow-cancel-read`\n- `allow-clear-break`\n- `allow-clear-buffer`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-managed-ports`\n- `allow-open`\n- `allow-read`\n- `allow-read-binary`\n- `allow-read-carrier-detect`\n- `allow-read-cd`\n- `allow-read-clear-to-send`\n- `allow-read-cts`\n- `allow-read-data-set-ready`\n- `allow-read-dsr`\n- `allow-read-dtr`\n- `allow-read-ri`\n- `allow-read-ring-indicator`\n- `allow-set-baud-rate`\n- `allow-set-break`\n- `allow-set-data-bits`\n- `allow-set-flow-control`\n- `allow-set-parity`\n- `allow-set-stop-bits`\n- `allow-set-timeout`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-write`\n- `allow-write-binary`\n- `allow-write-data-terminal-ready`\n- `allow-write-dtr`\n- `allow-write-request-to-send`\n- `allow-write-rts`\n- `allow-set-log-level`\n- `allow-get-log-level`", |
2077 | 2089 | "type": "string", |
2078 | 2090 | "const": "serialplugin:default", |
2079 | | - "markdownDescription": "# Tauri `serialport` default permissions\n\nThis configuration file defines the default permissions granted\nto the serialport.\n\n### Granted Permissions\n\nThis default permission set enables all read-related commands and\nallows access to the `$APP` folder and sub directories created in it.\nThe location of the `$APP` folder depends on the operating system,\nwhere the application is run.\n\nIn general the `$APP` folder needs to be manually created\nby the application at runtime, before accessing files or folders\nin it is possible.\n\n### Denied Permissions\n\nThis default permission set prevents access to critical components\nof the Tauri application by default.\nOn Windows the webview data folder access is denied.\n\n\n#### This default permission set includes:\n\n- `allow-managed-ports`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-cancel-read`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-open`\n- `allow-read`\n- `allow-write`\n- `allow-write-binary`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-bytes-to-read`\n- `allow-bytes-to-write`\n- `allow-cancel-read`\n- `allow-clear-break`\n- `allow-clear-buffer`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-managed-ports`\n- `allow-open`\n- `allow-read`\n- `allow-read-binary`\n- `allow-read-carrier-detect`\n- `allow-read-cd`\n- `allow-read-clear-to-send`\n- `allow-read-cts`\n- `allow-read-data-set-ready`\n- `allow-read-dsr`\n- `allow-read-dtr`\n- `allow-read-ri`\n- `allow-read-ring-indicator`\n- `allow-set-baud-rate`\n- `allow-set-break`\n- `allow-set-data-bits`\n- `allow-set-flow-control`\n- `allow-set-parity`\n- `allow-set-stop-bits`\n- `allow-set-timeout`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-write`\n- `allow-write-binary`\n- `allow-write-data-terminal-ready`\n- `allow-write-dtr`\n- `allow-write-request-to-send`\n- `allow-write-rts`" |
| 2091 | + "markdownDescription": "# Tauri `serialport` default permissions\n\nThis configuration file defines the default permissions granted\nto the serialport.\n\n### Granted Permissions\n\nThis default permission set enables all read-related commands and\nallows access to the `$APP` folder and sub directories created in it.\nThe location of the `$APP` folder depends on the operating system,\nwhere the application is run.\n\nIn general the `$APP` folder needs to be manually created\nby the application at runtime, before accessing files or folders\nin it is possible.\n\n### Denied Permissions\n\nThis default permission set prevents access to critical components\nof the Tauri application by default.\nOn Windows the webview data folder access is denied.\n\n\n#### This default permission set includes:\n\n- `allow-managed-ports`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-cancel-read`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-open`\n- `allow-read`\n- `allow-write`\n- `allow-write-binary`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-available-ports`\n- `allow-available-ports-direct`\n- `allow-bytes-to-read`\n- `allow-bytes-to-write`\n- `allow-cancel-read`\n- `allow-clear-break`\n- `allow-clear-buffer`\n- `allow-close`\n- `allow-close-all`\n- `allow-force-close`\n- `allow-managed-ports`\n- `allow-open`\n- `allow-read`\n- `allow-read-binary`\n- `allow-read-carrier-detect`\n- `allow-read-cd`\n- `allow-read-clear-to-send`\n- `allow-read-cts`\n- `allow-read-data-set-ready`\n- `allow-read-dsr`\n- `allow-read-dtr`\n- `allow-read-ri`\n- `allow-read-ring-indicator`\n- `allow-set-baud-rate`\n- `allow-set-break`\n- `allow-set-data-bits`\n- `allow-set-flow-control`\n- `allow-set-parity`\n- `allow-set-stop-bits`\n- `allow-set-timeout`\n- `allow-start-listening`\n- `allow-stop-listening`\n- `allow-write`\n- `allow-write-binary`\n- `allow-write-data-terminal-ready`\n- `allow-write-dtr`\n- `allow-write-request-to-send`\n- `allow-write-rts`\n- `allow-set-log-level`\n- `allow-get-log-level`" |
2080 | 2092 | }, |
2081 | 2093 | { |
2082 | 2094 | "description": "Enables the available_ports command without any pre-configured scope.", |
|
2138 | 2150 | "const": "serialplugin:allow-force-close", |
2139 | 2151 | "markdownDescription": "Enables the force_close command without any pre-configured scope." |
2140 | 2152 | }, |
| 2153 | + { |
| 2154 | + "description": "Enables the get_log_level command without any pre-configured scope.", |
| 2155 | + "type": "string", |
| 2156 | + "const": "serialplugin:allow-get-log-level", |
| 2157 | + "markdownDescription": "Enables the get_log_level command without any pre-configured scope." |
| 2158 | + }, |
2141 | 2159 | { |
2142 | 2160 | "description": "Enables the managed_ports command without any pre-configured scope.", |
2143 | 2161 | "type": "string", |
|
2240 | 2258 | "const": "serialplugin:allow-set-flow-control", |
2241 | 2259 | "markdownDescription": "Enables the set_flow_control command without any pre-configured scope." |
2242 | 2260 | }, |
| 2261 | + { |
| 2262 | + "description": "Enables the set_log_level command without any pre-configured scope.", |
| 2263 | + "type": "string", |
| 2264 | + "const": "serialplugin:allow-set-log-level", |
| 2265 | + "markdownDescription": "Enables the set_log_level command without any pre-configured scope." |
| 2266 | + }, |
2243 | 2267 | { |
2244 | 2268 | "description": "Enables the set_parity command without any pre-configured scope.", |
2245 | 2269 | "type": "string", |
|
2366 | 2390 | "const": "serialplugin:deny-force-close", |
2367 | 2391 | "markdownDescription": "Denies the force_close command without any pre-configured scope." |
2368 | 2392 | }, |
| 2393 | + { |
| 2394 | + "description": "Denies the get_log_level command without any pre-configured scope.", |
| 2395 | + "type": "string", |
| 2396 | + "const": "serialplugin:deny-get-log-level", |
| 2397 | + "markdownDescription": "Denies the get_log_level command without any pre-configured scope." |
| 2398 | + }, |
2369 | 2399 | { |
2370 | 2400 | "description": "Denies the managed_ports command without any pre-configured scope.", |
2371 | 2401 | "type": "string", |
|
2468 | 2498 | "const": "serialplugin:deny-set-flow-control", |
2469 | 2499 | "markdownDescription": "Denies the set_flow_control command without any pre-configured scope." |
2470 | 2500 | }, |
| 2501 | + { |
| 2502 | + "description": "Denies the set_log_level command without any pre-configured scope.", |
| 2503 | + "type": "string", |
| 2504 | + "const": "serialplugin:deny-set-log-level", |
| 2505 | + "markdownDescription": "Denies the set_log_level command without any pre-configured scope." |
| 2506 | + }, |
2471 | 2507 | { |
2472 | 2508 | "description": "Denies the set_parity command without any pre-configured scope.", |
2473 | 2509 | "type": "string", |
|
0 commit comments