From 98d1c2d6e70533c5e7aa655ffa14835cefab41c8 Mon Sep 17 00:00:00 2001
From: Ryan Yin <xiaoyin_c@qq.com>
Date: Sun, 1 Nov 2026 11:46:58 +0800
Subject: [PATCH] fix(nixpak): allow WebKit network portals for slicers

---
 hardening/nixpaks/modules/portal-groups.nix | 4 ++++
 hardening/nixpaks/modules/slicer-policy.nix | 1 +
 hardening/tests/policy/bambu-studio.nix     | 1 +
 hardening/tests/policy/orca-slicer.nix      | 1 +
 4 files changed, 7 insertions(+)

diff --git a/hardening/nixpaks/modules/portal-groups.nix b/hardening/nixpaks/modules/portal-groups.nix
index db44141a..96754c41 100644
--- a/hardening/nixpaks/modules/portal-groups.nix
+++ b/hardening/nixpaks/modules/portal-groups.nix
@@ -17,6 +17,10 @@ let
       "Notification.AddNotification"
       "Notification.RemoveNotification"
     ];
+    webkit = [
+      "NetworkMonitor.GetStatus"
+      "ProxyResolver.Lookup"
+    ];
     screenCast = [
       "ScreenCast.CreateSession"
       "ScreenCast.SelectSources"
diff --git a/hardening/nixpaks/modules/slicer-policy.nix b/hardening/nixpaks/modules/slicer-policy.nix
index a501b650..385544a5 100644
--- a/hardening/nixpaks/modules/slicer-policy.nix
+++ b/hardening/nixpaks/modules/slicer-policy.nix
@@ -41,6 +41,7 @@ in
       openUri = true;
       notifications = true;
       inputMethod = true;
+      webkit = true;
     };
     desktopIntegration = {
       notifications = true;
diff --git a/hardening/tests/policy/bambu-studio.nix b/hardening/tests/policy/bambu-studio.nix
index 4eceb9d5..7ad341c2 100644
--- a/hardening/tests/policy/bambu-studio.nix
+++ b/hardening/tests/policy/bambu-studio.nix
@@ -17,6 +17,7 @@ mkAppPolicy "bambu-studio" {
     fileChooser = app.portalGroups.fileChooser;
     openUri = app.portalGroups.openUri;
     inputMethod = app.portalGroups.inputMethod;
+    webkit = app.portalGroups.webkit;
     accessibility = app.desktopIntegration.accessibility;
   };
 }
diff --git a/hardening/tests/policy/orca-slicer.nix b/hardening/tests/policy/orca-slicer.nix
index e82fd3a2..5651107d 100644
--- a/hardening/tests/policy/orca-slicer.nix
+++ b/hardening/tests/policy/orca-slicer.nix
@@ -17,6 +17,7 @@ mkAppPolicy "orca-slicer" {
     fileChooser = app.portalGroups.fileChooser;
     openUri = app.portalGroups.openUri;
     inputMethod = app.portalGroups.inputMethod;
+    webkit = app.portalGroups.webkit;
     accessibility = app.desktopIntegration.accessibility;
   };
 }