Jake 7ece0df0ac fix(cr-2026-04-22): CSP guard matches connect-src as exact directive name ...

MINOR from the 2026-04-22 review (build.rs:47-64): the guard used
strip_prefix("connect-src") to find the directive, which would also
match hypothetical future directives like connect-src-elem and
validate the wrong allow-list.

Switches to split_once(char::is_whitespace) on each directive and
requires the first token to equal "connect-src" exactly. Robust
against prefix collisions with any future CSP3 directive
additions.

2026-04-22 09:11:53 +01:00

..

.cargo

feat(kon): scaffold hybrid modular workspace

2026-03-16 20:21:38 +00:00

capabilities

fix(capabilities): cover transcription-preview window in default ACL

2026-04-21 16:00:03 +01:00

gen/schemas

fix(capabilities): cover transcription-preview window in default ACL

2026-04-21 16:00:03 +01:00

icons

feat(kon): scaffold hybrid modular workspace

2026-03-16 20:21:38 +00:00

resources/windows

fix(ci A.1 #12): drop tauri.windows.conf.json — cargo check fails on unknown _comment field + missing resources

2026-04-21 15:54:15 +01:00

src

fix(cr-2026-04-22): recording_filename avoids same-second collisions

2026-04-22 09:06:47 +01:00

build.rs

fix(cr-2026-04-22): CSP guard matches connect-src as exact directive name

2026-04-22 09:11:53 +01:00

Cargo.toml

fix(A.2 #13): propagate whisper feature from kon crate through to kon-transcription

2026-04-22 04:54:07 +01:00

tauri.conf.json

feat(A.1 #2): widen CSP connect-src for localhost LLM endpoints

2026-04-21 15:54:15 +01:00

tauri.linux.conf.json

agent: dogfood polish 2026/04/19 — Linux native chrome + History redesign + mic picker cleanup

2026-04-19 14:30:42 +01:00