Add configurable allowed directory for applications with 'any' option

This commit introduces the `APPLICATIONS_ALLOWEDDIRECTORY` configuration parameter to control application file access restrictions. The default value is set to 'app', maintaining current behavior, while 'any' allows unrestricted directory access by clearing the allowedPath check.

Author: kriszyp

components/ApplicationScope.ts

@@ -32,6 +32,7 @@ export class ApplicationScope {
 
 		this.mode = env.get(CONFIG_PARAMS.APPLICATIONS_MODULELOADER) ?? 'vm';
 		this.dependencyLoader = env.get(CONFIG_PARAMS.APPLICATIONS_DEPENDENCYLOADER);
+		if (env.get(CONFIG_PARAMS.APPLICATIONS_ALLOWEDDIRECTORY) !== 'app') this.allowedPath = ''; // this is used to match paths by startsWith, so empty string matches everything
 	}
 
 	/**

static/defaultConfig.yaml

@@ -30,6 +30,7 @@ applications:
   allowedSpawnCommands:
     - npm
     - node
+  allowedDirectory: app
 componentsRoot: null
 localStudio:
   enabled: true

utility/hdbTerms.ts

@@ -442,6 +442,7 @@ export const CONFIG_PARAMS = {
 	APPLICATIONS_PACKAGEMANAGERPREFIX: 'applications_packageManagerPrefix',
 	APPLICATIONS_ALLOWEDBUILTINMODULES: 'applications_allowedBuiltInModules',
 	APPLICATIONS_ALLOWEDSPAWNCOMMANDS: 'applications_allowedSpawnCommands',
+	APPLICATIONS_ALLOWEDDIRECTORY: 'applications_allowedDirectory',
 	THREADS: 'threads',
 	THREADS_COUNT: 'threads_count',
 	THREADS_DEBUG: 'threads_debug',

utility/install/installer.js

@@ -56,6 +56,7 @@ const DEV_MODE_CONFIG = {
 	[CONFIG_PARAMS.OPERATIONSAPI_NETWORK_PORT]: 9925,
 	[CONFIG_PARAMS.LOCALSTUDIO_ENABLED]: true,
 	[CONFIG_PARAMS.NODE_HOSTNAME]: DEFAULT_NODE_HOSTNAME,
+	[CONFIG_PARAMS.APPLICATIONS_ALLOWEDDIRECTORY]: 'any',
 };
 
 // Install prompts