mirror of
https://github.com/Orama-Interactive/Pixelorama.git
synced 2025-01-19 01:29:49 +00:00
158e0fa18b
This is just an added step for security. Now, if an extension file gets compromised, Pixelorama can detect the mismatch between the file's SHA256 and the SHA256 from the extension repository, and refuse to install the extension. For example, someone with malicious intent could gain access in the repository where the extension file is hosted, and replace it with a different file. Before this commit, the malicious file would be downloaded normally, but now, since the file will change, so will its SHA-256 hash, so Pixelorama will be able detect the mismatch and recognize that it is potentially malicious. |
||
|---|---|---|
| .. | ||
| Buttons | ||
| Canvas | ||
| CanvasPreviewContainer | ||
| ColorPickers | ||
| Dialogs | ||
| ExtensionExplorer | ||
| GlobalToolOptions | ||
| Nodes | ||
| PerspectiveEditor | ||
| Recorder | ||
| ReferenceImages | ||
| Timeline | ||
| ToolsPanel | ||
| TopMenuContainer | ||
| Tabs.gd | ||
| UI.gd | ||
| UI.tscn | ||
| ViewportContainer.gd | ||