[haiku-commits] Re: r41581 - in haiku/trunk: headers/private/interface src/add-ons/decorators/BeDecorator src/add-ons/decorators/MacDecorator src/add-ons/decorators/SATDecorator src/add-ons/decorators/WinDecorator ...
- From: François Revol <revol@xxxxxxx>
- To: haiku-commits@xxxxxxxxxxxxx
- Date: Fri, 20 May 2011 01:32:33 +0200
Le 19 mai 2011 à 17:25, superstippi@xxxxxx a écrit :
> Applied patch by Joseph "looncraz" Groover from ticket #7445.
> This changes how Decorators are managed and applied. The app_server
> no longer scans and maintains the available ones himself, but is
> simply asked to load a Decorator add-on from a provided path.
This is fundamentally broken wrt security (multiuser). The user should not be
allowed to load arbitrary untrusted code into app_server. This will have to be
fixed sooner or later.
> The Decorator scanning is moved into DecorInfo and DecorInfoUtil,
> private classes in the InterfaceKit. The bin command 'setdecor'
> uses those.
This breaks ThemeManager but he's working on that already, so I guess it's ok :P
François.
Other related posts:
