D17097: [scripting] Emit clientAdded for Wayland clients
David Strobach <[email protected]>
| Newsgroups | gmane.comp.kde.devel.kwin |
|---|---|
| Message-ID | <[email protected]> |
strobach added a comment. > - Add a config option somewhere that enables this functionality (I'm happy editing a file rather than requiring a GUI option) > - A warning when adding a script that says something about not trusting random scripts from the internet Neither of the above would solve the issue. - The configuration options are stored in plaintext and are writable by any process. - The scripting interface is exposed on D-Bus, so any process can download and run any arbitrary script. The solution would be to store the plugins configuration encrypted (or in general to allow for encrypted config sections) and to remove potentially dangerous methods from the D-Bus interface. I do, however agree, that the scripting interface is currently virtually unusable on Wayland. REPOSITORY R108 KWin REVISION DETAIL https://phabricator.kde.org/D17097 To: zzag, #kwin Cc: strobach, TomButler, davidedmundson, mart, graesslin, kwin, jraleigh, GB_2, mkulinski, ragreen, jackyalcine, Pitel, iodelay, bwowk, ZrenBot, ngraham, alexeymin, himcesjf, lesliezhai, ali-mohamed, hardening, jensreuterberg, abetts, sebas, apol