Skip to content

Fix Chrome bundled plugin trust validation#1105

Merged
ilysenko merged 2 commits into
mainfrom
codex/issue-1082-chrome-plugin-trust
Jul 21, 2026
Merged

Fix Chrome bundled plugin trust validation#1105
ilysenko merged 2 commits into
mainfrom
codex/issue-1082-chrome-plugin-trust

Conversation

@ilysenko

Copy link
Copy Markdown
Owner

Summary

  • validate bundled plugin sources and their ancestor chain before copying
  • create private Linux marketplace staging directories and fail closed on unsafe paths
  • prepare launcher-managed staging paths safely and normalize AppImage payload permissions
  • add regression coverage for trusted, untrusted, drift, launcher, and AppImage scenarios

Fixes #1082

Tests

  • node --test scripts/patch-linux-window-ui.test.js (404 tests passed)
  • bash tests/scripts_smoke.sh
  • make inspect-upstream DMG=/home/igor/codex-desktop-linux/Codex.dmg
  • bash -n launcher/start.sh.template scripts/build-appimage.sh tests/scripts_smoke.sh
  • node --check scripts/patches/impl/main-process/browser.js
  • git diff --check

Notes

Targets the current supported upstream DMG. Native package payload normalization remains unchanged; AppImage now follows the same permission boundary.

@ilysenko
ilysenko merged commit 7374303 into main Jul 21, 2026
12 of 13 checks passed
@ilysenko
ilysenko deleted the codex/issue-1082-chrome-plugin-trust branch July 21, 2026 04:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Chrome plugin fails: app-server manifest entry missing required paths.parent

1 participant