Skip to content

feat: isolate run button#1952

Merged
dsanders11 merged 2 commits into
mainfrom
refactor/isolate-zee-run-button-now
May 29, 2026
Merged

feat: isolate run button#1952
dsanders11 merged 2 commits into
mainfrom
refactor/isolate-zee-run-button-now

Conversation

@dsanders11
Copy link
Copy Markdown
Member

Isolates the run button to a cross-origin iframe to ensure it's rendered as an out-of-process iframe (OOPIF), and is isolated in a separate process to protect against a compromised renderer. This prevents the renderer from being able to programmatically run fiddles, and only the main process or user interaction can start them.

Assisted-by: Claude Opus 4.7
@dsanders11 dsanders11 requested a review from ckerr May 22, 2026 05:23
@dsanders11 dsanders11 requested review from a team and codebytere as code owners May 22, 2026 05:23
@coveralls
Copy link
Copy Markdown

coveralls commented May 22, 2026

Coverage Status

coverage: 87.403% (-0.9%) from 88.301% — refactor/isolate-zee-run-button-now into main

Comment thread src/preload/preload.ts
Comment thread src/main/isolated-actions.ts Outdated
Comment thread src/main/isolated-actions.ts Outdated
Assisted-by: Claude Opus 4.7
@dsanders11 dsanders11 merged commit e6b639c into main May 29, 2026
17 checks passed
@dsanders11 dsanders11 deleted the refactor/isolate-zee-run-button-now branch May 29, 2026 06:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants