fix

[liwilliam2021]

Thanks to someone from Roo Vet for pointing out this bug.

The Roo Code extension had a security vulnerability where users could bypass organizational MDM (Mobile Device Management) policies by opening the extension in a new tab/window. The openClineInNewTab function was creating new ClineProvider instances without passing the MDM service parameter, but patched now!

---

Important

Fix security vulnerability by passing MdmService to ClineProvider in openClineInNewTab() to enforce MDM policies.

• Security Fix:
  • In openClineInNewTab() in registerCommands.ts, ensure MdmService instance is passed to ClineProvider to enforce MDM policies.
  • Handles case where MdmService is not initialized by setting it to undefined.
• Misc:
  • Add import for MdmService in registerCommands.ts.

^{This description was created by for b8923df. You can customize this summary. It will automatically update as commits are pushed.}

[delve-auditor]

✅ No security or compliance issues detected. Reviewed everything up to b8923df.

Security Overview

• 🔎 Scanned files: 1 changed file(s)

Detected Code Changes

Change Type	Relevant files
Enhancement	► registerCommands.ts     Add MDM service integration to ClineProvider

Reply to this PR with @delve-auditor followed by a description of what change you want and we'll auto-submit a change to this PR to implement it.

[mrubens]

Nice!