From 2904aaec55477e74ca01947e3986dd5dd23ece12 Mon Sep 17 00:00:00 2001
From: Firefly0619sec <firefly0619sec@users.noreply.github.com>
Date: Fri, 23 Oct 2026 19:51:34 +0800
Subject: [PATCH] fix(security): narrow fs and asset scopes to the home
 directory

---
 src-tauri/capabilities/default.json | 2 --
 src-tauri/tauri.conf.json           | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/src-tauri/capabilities/default.json b/src-tauri/capabilities/default.json
index 5e231dacf..dc0dd22c9 100644
--- a/src-tauri/capabilities/default.json
+++ b/src-tauri/capabilities/default.json
@@ -39,8 +39,6 @@
     "fs:allow-rename",
     "fs:allow-exists",
     "fs:allow-copy-file",
-    "fs:read-all",
-    "fs:write-all",
     "fs:scope-app-recursive",
     "fs:scope-home-recursive",
     "http:default",
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index f82be8a04..40793671d 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -28,7 +28,7 @@
       "assetProtocol": {
         "enable": true,
         "scope": [
-          "**"
+          "$HOME/**"
         ]
       }
     }