flutter_cef security hardening: nav scheme allowlist + ad-hoc compile-gate#1

Merged

wenkaifan0720 merged 6 commits into

mainfrom

feat/nav-scheme-allowlist

Jun 9, 2026

Commits on Jun 9, 2026

feat: navigation scheme allowlist (CefWebView.allowedSchemes)

wenkaifan0720
and
claude
committed
feat: gate ad-hoc-only CEF security shortcuts behind CEF_HOST_ADHOC

wenkaifan0720
and
claude
committed
fix: exempt loadHtmlString/loadFile from the navigation scheme allowlist

wenkaifan0720
and
claude
committed
example: demo the navigation scheme allowlist

wenkaifan0720
and
claude
committed
fix(security): bind trusted-load exemption to exact URL + gate main-frame only

wenkaifan0720
and
claude
committed
feat(security): enable CEF renderer sandbox + release entitlements (CEF_HOST_ADHOC=OFF)

wenkaifan0720
and
claude
committed