taskGnash - The GNU Flash player - Tasks: task #6671, Allow extensions configuration...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

task #6671: Allow extensions configuration from the .gnasrc file

Submitter:  Sandro Santilli <strk>
Submitted:  Thu 22 Mar 2007 05:37:57 PM UTC
   
 
Should Start On:  Wed 21 Mar 2007 11:00:00 PM UTC Should be Finished on:  Wed 21 Mar 2007 11:00:00 PM UTC
Category:  None Priority:  1 - Later
Status:  None Privacy:  Public
Assigned to:  None Percent Complete:  100%
Open/Closed:  Closed Effort:  0.00

Fri 25 May 2007 04:05:47 PM UTC, comment #3: 

You now need to set EnableExtensions to ON in your gnashrc.
Next step would be allowing Gnash to use a user-specified gnashrc instead of always the default. At least for running testcases, but I also belive it would be nice for the plugin as well...

Sandro Santilli <strk>
Group Member
Wed 28 Mar 2007 06:45:20 AM UTC, comment #2: 

Right, which is equivalent to give your own account to anyone that publish an SWF movie :)

Sandro Santilli <strk>
Group Member
Wed 28 Mar 2007 02:39:52 AM UTC, comment #1: 

The FileIO extension uses the existing file systems permission of any file, and since Gnash runs as the user, and not root, it should at the least be as secure as any shell account by the same user.

Rob Savoye <rsavoye>
Group administrator
Thu 22 Mar 2007 05:37:57 PM UTC, original submission:  

Extensions are very dangerous, especially the FileIO one.
Ok, they are disabled by default at compile time but
I think we should have some more care.

First, I'd have them disabled at runtime, and only enablable
by .gnashrc. Second I'd add some more configuration for
extensions. For example, for FileIO, we might allow reading
but not writing, or restricting to a given dir.

Finally, it would be nice to have extensions all grouped
into a Gnash-specific namespace, like System.extensions.gnash.FileIO, but this might go to another task.

Sandro Santilli <strk>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rsavoye (Posted a comment)
  • -email is unavailable- added by strk (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-05-25 strk Percent Complete0% 100%
        Open/ClosedOpen Closed

    Back to the top

    Powered by Savane 3.13-d3ae.
    Corresponding source code