Dylan M. Taylor a005d8235f M2.9: close protection gaps a trusted script or other sheet would slip through (sec scan findings 17,20,24) (#2420) ...

- scripts: refuse `window.*` steps like file and link steps — activating
  another window repointed every later step at a different open document
  (finding 17).
- format: on a protected sheet, formatting may not change a cell's
  protection flags: the format-cells permission can't drop `locked` and
  then authorize content edits the password gates (finding 20).
- sheet.moveColumns: the insert/delete protection checks now carry the
  command's own `sheet` parameter, so the sheet modified is the sheet
  authorized, not whichever is active (finding 24).

Tests: unlock-via-format refused, cross-sheet move refused, window switch
refused, plus the positive controls. Engine: 462 tests pass; clippy clean.

2026-10-24 06:15:24 -04:00

..

examples

fix: satisfy stricter clippy lints CI's newer stable toolchain catches

2026-10-12 02:52:07 +02:00

src

M2.9: close protection gaps a trusted script or other sheet would slip through (sec scan findings 17,20,24) (#2420)

2026-10-24 06:15:24 -04:00

tests/it

Engine: building blocks for multi-command actions (undo groups, recording buffer, document trust, chunked hidden names) (#462)

2026-10-24 02:06:44 -04:00

Cargo.toml

Engine: file.open decrypts password-protected workbooks (#11)

2026-10-11 23:29:28 +02:00