jennyf19 055dda1672 signals-dashboard: harden desk launch (round 2 review) ...

Synced from the-workshop@8106dd4. Addresses the second GHCP review pass on #2363:

- isOnPath now requires a runnable file (X_OK / PATHEXT), not just existsSync.

- launchDeskConsole adds a realpath-containment check (symlink escape) and takes workshopDir.

- Dashboard copies the path only on the non-launch fallback.

- Mutating /api/* routes now require the canonical loopback Host plus a per-server capability token (DNS-rebinding defense), mirroring connector-namespaces.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 26faf13e-639c-4a21-ac05-c0dc2bff7c62

2026-07-20 11:28:43 -07:00

..

accessibility-kanban

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

apng-studio

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

arcade-canvas

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

backlog-swipe-triage

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

chromium-control-canvas

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

color-orb

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

connector-namespaces

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

diagram-viewer

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

external-assets

Add canvas previews, external extension links, and release notes showcase (#1987)

2026-06-17 09:18:49 +10:00

feedback-themes

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

gesture-review

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

java-modernization-studio

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

release-notes-showcase

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

repo-actions-hub

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

signals-dashboard

signals-dashboard: harden desk launch (round 2 review)

2026-07-20 11:28:43 -07:00

site-studio

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

tiny-tool-town-submitter

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

token-pacman

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

where-was-i

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

work-hub

Fix extension materialization to move bundles into container (#2339)

2026-07-18 10:49:27 +10:00

external.json

Add contributor attribution to canvas extension cards (#2111)

2026-06-25 14:52:58 +10:00