[haiku-commits] Re: r41581 - in haiku/trunk: headers/private/interface src/add-ons/decorators/BeDecorator src/add-ons/decorators/MacDecorator src/add-ons/decorators/SATDecorator src/add-ons/decorators/WinDecorator ...

  • From: François Revol <revol@xxxxxxx>
  • To: haiku-commits@xxxxxxxxxxxxx
  • Date: Fri, 20 May 2011 01:32:33 +0200

Le 19 mai 2011 à 17:25, superstippi@xxxxxx a écrit :

> Applied patch by Joseph "looncraz" Groover from ticket #7445.
> This changes how Decorators are managed and applied. The app_server
> no longer scans and maintains the available ones himself, but is
> simply asked to load a Decorator add-on from a provided path.

This is fundamentally broken wrt security (multiuser). The user should not be 
allowed to load arbitrary untrusted code into app_server. This will have to be 
fixed sooner or later.

> The Decorator scanning is moved into DecorInfo and DecorInfoUtil,
> private classes in the InterfaceKit. The bin command 'setdecor'
> uses those.

This breaks ThemeManager but he's working on that already, so I guess it's ok :P


Other related posts: