Squirrel / Squirrel.Windows

An installation and update framework for Windows desktop apps
MIT License
7.23k stars 1.02k forks source link

Better delay load urlmon and move official build to GH Actions #1807

Closed robmen closed 2 years ago

robmen commented 2 years ago

A small "bug fix" and build process improvements

anaisbetts commented 2 years ago

Try to add a PR description for every PR, but otherwise :shipit:

YoelRT commented 1 year ago

A small "bug fix" and build process improvements

  • Simplify DllHijack mitigation and ensure urlmon is delay loaded
  • Update NuGet submodule to point into Squirrel org
  • Move official build to GitHub Actions

Any soon update to solve: The squirrel.windows package is vulnerable to DLL Hijacking attacks ??