prxnvt 23c0107511 Engine: macro policy checks a step's parameters after tokens resolve; any path counts as file access ...

A path given as a token (`{"$ref": "Input"}` or `{{Input}}`) became a file name only when the
step ran, after the policy had passed it, so a macro without permissions or approval could write
a file, even from macro.check. Exports also wrote to blank paths the policy ignored. Any `path`
other than null now needs the permission and approval, and the runner checks the policy again on
the resolved parameters before the command runs.

2026-10-22 02:26:32 -04:00

..

examples

Review fix-up: uniform, plot-clamped spline smoothing

2026-10-10 12:21:35 -04:00

src

Engine: macro policy checks a step's parameters after tokens resolve; any path counts as file access

2026-10-22 02:26:32 -04:00

tests

Merge pull request #1879 from Silvertree2010:fix/h2804-custom-autofilter-is-less-than-l

2026-10-19 12:21:34 -04:00

Cargo.toml

Engine: file.open decrypts password-protected workbooks (#11)

2026-10-11 23:29:28 +02:00