New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Security] Security related with plugins loader #281

Open

langyo opened this issue Mar 1, 2024 · 1 comment

Labels

enhancement security tracking

Contributor

langyo commented Mar 1, 2024

执行前对插件的哈希校验，防止篡改
插件通信SDK能自动与宿主程序进行加密通信，具体实现为：
- 插件启动时传入握手公钥
- 插件启动时SDK自动解析公钥，并向对应管道通信并发送插件临时公钥，交换得到双方临时公钥
- 插件与宿主的通信全程以该临时密钥对通信
严格控制插件的执行等级，需要 UAC 权限进行操作的插件必须提前向宿主申请

langyo added the enhancement label

Dynesshely added the security label

Dynesshely changed the title ~~[备忘] 为插件加载器增加一批安全设施~~ [Security] Security related with plugins loader

Dynesshely mentioned this issue

[Roadmap] KitX Security | 安全相关路线图 #282

Open

1 task

github-actions bot commented Mar 2, 2024

Tracked by #282 .

github-actions bot added the tracking label

Dynesshely mentioned this issue

[Roadmap] KitX General | 总体开发路线图 #210

Open

3 tasks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment