1
0
Fork 0
mirror of https://github.com/Orama-Interactive/Pixelorama.git synced 2025-01-19 09:39:48 +00:00
Commit graph

13 commits

Author SHA1 Message Date
Emmanouil Papadeas 158e0fa18b Validate the extension file SHA-256 hash when downloading for security purposes
This is just an added step for security. Now, if an extension file gets compromised, Pixelorama can detect the mismatch between the file's SHA256 and the SHA256 from the extension repository, and refuse to install the extension.

For example, someone with malicious intent could gain access in the repository where the extension file is hosted, and replace it with a different file. Before this commit, the malicious file would be downloaded normally, but now, since the file will change, so will its SHA-256 hash, so Pixelorama will be able detect the mismatch and recognize that it is potentially malicious.
2024-07-07 18:29:10 +03:00
Emmanouil Papadeas dd6332b75a [skip ci] Fix Voxelorama link 2024-07-01 18:03:40 +03:00
Emmanouil Papadeas 6601f83332 Rename store_info.md to extension_repository.md, add Voxelorama and remove other store links
The reason for removing the other store link is because I am worried that adding more links by default, can make it easier to compromise security. Extensions can be dangerous, and even if one link gets injected by malware, users are in danger, so I think it's better to keep the extensions is one, centralized place. I included all of the extensions listed in Variable's store link in this file.

I also renamed it from store to repository, as I think it's a more fitting name.
2024-07-01 17:49:59 +03:00
Emmanouil Papadeas 8c5aba0083 Implement dragging and dropping images directly from the browser to download them and import them 2024-05-25 15:02:13 +03:00
Emmanouil Papadeas 3a4517abf4 [skip ci] Update the Lospec Palette Importer extension version 2024-05-13 19:32:31 +03:00
Emmanouil Papadeas 074fed10bf [skip ci] Fix typos and replace tabs with a single space in store_info.md 2024-04-21 15:04:37 +03:00
Emmanouil Papadeas 1d89064efb [skip ci] Fix wrong tag in store_info.md 2024-04-20 20:02:21 +03:00
Emmanouil Papadeas b3ef4f1ff3 Add OpenDyslexicFont to the Extensions explorer 2024-04-20 19:57:15 +03:00
Emmanouil Papadeas d75c2be6c5
[skip ci] Update store_info.md 2024-04-19 21:06:16 +03:00
Emmanouil Papadeas d0c58e249a Add LospecPaletteImporter extension in store_info.md 2024-04-19 21:00:58 +03:00
Emmanouil Papadeas f3ca6d1c33 Separate extension handling code from the Preferences UI
The preferences code only handles the UI related stuff, while HandleExtensions is now solely responsible for extension enabling, loading and uninstalling. This makes it possible to handle extensions without having the preferences dialog be in the middle.
2024-03-24 01:20:51 +02:00
Emmanouil Papadeas 64983b0404 Some static typing improvements 2024-03-22 03:07:21 +02:00
Variable f43f80cee0
Integrate Extension Explorer (#910)
* Integration of ExtensionExplorer

---------

Co-authored-by: Emmanouil Papadeas <35376950+OverloadedOrama@users.noreply.github.com>
Co-authored-by: Emmanouil Papadeas <manoschool@yahoo.gr>
2024-01-23 03:25:37 +02:00