Re: [Gnash-dev] Building extensions

[strk]

On Wed, May 02, 2007 at 01:12:01PM +0200, Udo Giacomozzi wrote:

> >> - the user should know in some way when a security relevant extension
> >>   is being used by a movie (I would not want that my browser allows
> >>   full file system access to any movie I see on a web page)
> 
> s> We have a log_security() function which is currently used for loading 
> resources.
> s> We should use it for FileIO and similar things too, even if for just 
> saying:
> s> we're allowing this (so the user knows).
> 
> 
> Mmmh, then it's too late and you had no chance to block it.

Of course, we need hooks to the gui to do any better.
A pop up window that prompts you with:

        "XXX is going to happen"
        [] allow [] deny [] allow always [] deny always

.. or something like that ..

--strk;