fix(ui): gate desktop privileges by host and window context (#347)

Don't let remote server windows use local features like local file browser etc
2026-04-20 20:28:11 +01:00
parent 016c7bda4a
commit 3b411e2e73
17 changed files with 247 additions and 133 deletions
--- a/packages/electron-app/electron/main/main.ts
+++ b/packages/electron-app/electron/main/main.ts
@@ -277,6 +277,7 @@ function createWindow() {
      contextIsolation: true,
      nodeIntegration: false,
      spellcheck: !isMac,
+      additionalArguments: ["--codenomad-window-context=local"],
    },
  })

@@ -440,6 +441,7 @@ async function openRemoteWindow(payload: { id: string; name: string; baseUrl: st
      contextIsolation: true,
      nodeIntegration: false,
      spellcheck: !isMac,
+      additionalArguments: ["--codenomad-window-context=remote"],
    },
  })