Skip to content

feat: Security Hardening + Local Folder Access (v1.3.0) - #28

Open
jorgepwgestao wants to merge 3 commits into
AnRkey:mainfrom
jorgepwgestao:security-hardening-v1.3.0
Open

feat: Security Hardening + Local Folder Access (v1.3.0)#28
jorgepwgestao wants to merge 3 commits into
AnRkey:mainfrom
jorgepwgestao:security-hardening-v1.3.0

Conversation

@jorgepwgestao

@jorgepwgestao jorgepwgestao commented Jul 22, 2026

Copy link
Copy Markdown

Summary

This PR brings v1.3.0 with two major improvements:

1. Security Hardening

  • Disabled nodeIntegration + enabled contextIsolation + sandbox
  • Secure contextBridge (preload) + IPC whitelist
  • Origin-aware permission handlers
  • Electron updated to 43.2.0
  • License fixed to GPL-2.0

2. Local Folder Access (Claude Desktop-like)

  • Native folder picker (📂 button)
  • Read folder structure (depth & size limits)
  • Secure read / write / search files (path-safe)
  • Visual folder indicator in the toolbar
  • Improved context injection into Grok chat
  • DevTools button for debugging

How to test

  1. npm install && npm start
  2. Click the 📂 button → select a folder
  3. See the green badge with the folder name
  4. Context is injected (or copied to clipboard)

Ready for review! 🚀

- Secure folder selection with native dialog
- Read folder structure (depth/file limits + ignore heavy dirs)
- Secure clipboard via Electron main process
- Read / write / search files (path-safe)
- Visual folder indicator in toolbar (UX)
- Improved context injection into Grok chat
- DevTools button for debugging
- Security: path validation, sandbox, contextIsolation
@jorgepwgestao jorgepwgestao changed the title security: harden Electron configuration (v1.3.0) feat: Security Hardening + Local Folder Access (v1.3.0) Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant