Fixes: - Webpack Patcher: incorrect patch error handling could lead to some functional patches not being applied - CommandsAPI: subcommands were impossible to unregister - useAwaiter: on error, the value was set to null even if a fallbackValue was specified, violating the type contract - Patcher: build check boolean logic was grouped incorrectly due to missing parantheses - CustomCommands: commands weren't unregistered on stop, leading to error when enabling, disabling & re-renabling the plugin - Notification Log: delete was by timestamp instead of ID and non-atomic - FixSpotifyEmbeds: settings listener was registered inside browser-window-created event handler, leading to duplicate listeners - CustomRPC: changing activity type or timestamp didn't update the RPC - CopyStickerLinks: message patch had non-sense code, just removed it - XSOverlay: UDP socket wasn't closed on stop - VoiceMessages: Web recorder never closed the mic media stream, which continues showing the OS mic indicator - PictureInPicture: Video clone wasn't properly cleaned up, which leaked memory - Themes (Extension version): theme object urls were never cleaned up, which leaked memory on theme change - Themes (Extension version): Upload Theme button hitbox was only the text, not the whole button. Also added Drag & Drop from file manager support - Dearrow: toggling for one embed flipped the global dearrow by default setting - Extension Installer: the zip extract function was vulnerable to path traversal, although we only ever used this for React DevTools obtained via https so it has low impact - FileWatchers: ensure always properly cleaned up - components/Link: mutated props which is a very bad practice All fixes are human written, only the audit was done by Claude Fable (thanks for ur tokens, Zere).
83 lines
2.9 KiB
TypeScript
83 lines
2.9 KiB
TypeScript
/*
|
|
* Vencord, a modification for Discord's desktop app
|
|
* Copyright (c) 2023 Vendicated and contributors
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
import "./ipcMain";
|
|
|
|
import { app, net, protocol } from "electron";
|
|
import { join } from "path";
|
|
import { pathToFileURL } from "url";
|
|
|
|
import { initCsp } from "./csp";
|
|
import { RendererSettings } from "./settings";
|
|
import { IS_VANILLA, THEMES_DIR } from "./utils/constants";
|
|
import { ensureSafePath } from "./utils/ensureSafePath";
|
|
import { installExt } from "./utils/extensions";
|
|
|
|
if (IS_VESKTOP || !IS_VANILLA) {
|
|
app.whenReady().then(() => {
|
|
protocol.handle("vencord", ({ url: unsafeUrl }) => {
|
|
let url = decodeURI(unsafeUrl).slice("vencord://".length).replace(/\?v=\d+$/, "");
|
|
|
|
if (url.endsWith("/")) url = url.slice(0, -1);
|
|
|
|
if (url.startsWith("/themes/")) {
|
|
const theme = url.slice("/themes/".length);
|
|
|
|
const safeUrl = ensureSafePath(THEMES_DIR, theme);
|
|
if (!safeUrl) {
|
|
return new Response(null, {
|
|
status: 404
|
|
});
|
|
}
|
|
|
|
return net.fetch(pathToFileURL(safeUrl).toString());
|
|
}
|
|
|
|
// Source Maps! Maybe there's a better way but since the renderer is executed
|
|
// from a string I don't think any other form of sourcemaps would work
|
|
|
|
switch (url) {
|
|
case "renderer.js.map":
|
|
case "vencordDesktopRenderer.js.map":
|
|
case "preload.js.map":
|
|
case "vencordDesktopPreload.js.map":
|
|
case "patcher.js.map":
|
|
case "vencordDesktopMain.js.map":
|
|
return net.fetch(pathToFileURL(join(__dirname, url)).toString());
|
|
default:
|
|
return new Response(null, {
|
|
status: 404
|
|
});
|
|
}
|
|
});
|
|
|
|
try {
|
|
if (RendererSettings.store.enableReactDevtools)
|
|
installExt("fmkadmapgofadopljbjfkapdkoienihi")
|
|
.then(() => console.info("[Vencord] Installed React Developer Tools"))
|
|
.catch(err => console.error("[Vencord] Failed to install React Developer Tools", err));
|
|
} catch { }
|
|
|
|
|
|
initCsp();
|
|
});
|
|
}
|
|
|
|
if (IS_DISCORD_DESKTOP) {
|
|
require("./patcher");
|
|
}
|