MovieMapper

History

Jarian Cottingham 73f5585488 security: harden Electron app - context isolation, preload, fix XSS & command injection

- Enable contextIsolation, disable nodeIntegration, remove enableRemoteModule
- Add preload.js with safe contextBridge API exposure
- Fix OS command injection: exec() → execFile() in open-file-in-player
- Fix DOM XSS: replace innerHTML with textContent/createElement in FileListManager, UIManager, ModalManager
- Remove direct fs/electron access from renderer, route through IPC
- Add validate-folder and get-file-stats IPC handlers
- Load renderer modules via script tags with require polyfill

2026-07-05 07:31:06 +00:00

AppState.js

Add file editing via double-click and fix TVDB ID appending logic

2026-02-26 19:20:15 -06:00

EpisodeManager.js

Refactor renderer.js into modular class-based architecture

2026-02-25 02:47:35 -06:00

FileListManager.js

security: harden Electron app - context isolation, preload, fix XSS & command injection

2026-07-05 07:31:06 +00:00

FileManager.js

Refactor renderer.js into modular class-based structure