João Henrique
b541f502ba
- Adicionado estrutura completa do projeto - Configurado MCP server para Premiere Pro - Adicionado documentação e skills - Configurado Gitignore para o projeto
1.1 KiB
Executable File
1.1 KiB
Executable File
Recommendation 49: UXP external-launch policy
Evidence
Adobe UXP requires explicit launchProcess manifest permissions for external schemes and file extensions, distinguishes openPath() from openExternal(), and reports user denial through return values.
Proposed improvement
If the panel adds “open export,” “reveal artifact,” or documentation links, route them through one allowlisted launch broker. Require a user gesture, canonical destination, scheme/extension policy, and explicit denial handling.
Acceptance criteria
- Production permissions contain only reviewed schemes and extensions.
- Arguments, custom commands, UNC paths, and untrusted URLs are rejected.
- Launch failures never become export failures or success claims.
- Windows and macOS packaging tests verify the exact manifest.
This recommendation does not add process execution to the current production panel.