Skip to content

feat(security): Prevent settings discovery for disabled scripts #20

@mathe00

Description

@mathe00

Improve security and prevent unnecessary process execution by skipping the settings discovery step (--get-settings-json execution) for scripts explicitly marked as disabled in the plugin settings.

  • Modify updateScriptSettingsCache in src/python_executor.ts.
  • Before calling discoverScriptSettings for a script, check its status in plugin.settings.scriptActivationStatus.
  • If status is false, skip the discoverScriptSettings call for this script using continue.
  • Ensure any previously cached settings definitions and values for this now-skipped disabled script are cleared from the cache/UI upon refresh.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions