Skip to content

Conversation

@gabrieldonadel
Copy link
Member

@gabrieldonadel gabrieldonadel commented Jun 11, 2025

Why

For security reasons, Orbit should only allow downloading builds from Expo servers by default; if necessary, users can customise trusted sources through the Settings window

How

Make https://expo.dev/**, https://staging.expo.dev/** and https://expo.test/** default trusted sources

Test Plan

Run menu bar locally on macOS

@gabrieldonadel gabrieldonadel merged commit 21961c9 into main Jun 11, 2025
1 check passed
@gabrieldonadel gabrieldonadel deleted the @gabrieldonadel/custom-trusted-sources branch June 11, 2025 17:30
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we move this into TrustedSources.test.ts later?

gabrieldonadel added a commit that referenced this pull request Jun 13, 2025
* [cli] Add default trusted sources

* Add changelog entry
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants