[gnome-music] grilo: Don't leak information over http



commit 1d9ecd9c093bdb0d41d5a60aa5ceadfcb826f4c9
Author: Marinus Schraal <mschraal src gnome org>
Date:   Thu May 12 21:23:12 2016 +0200

    grilo: Don't leak information over http
    
    Grilo can use sources that use insecure http connections, leaking
    information about the users behaviour while doing so.
    
    Disable all Grilo sources that use insecure connections by checking for
    the net:plaintext tag.
    
    https://bugzilla.gnome.org/show_bug.cgi?id=747953

 gnomemusic/grilo.py |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)
---
diff --git a/gnomemusic/grilo.py b/gnomemusic/grilo.py
index 1bcad84..86a7eaf 100644
--- a/gnomemusic/grilo.py
+++ b/gnomemusic/grilo.py
@@ -172,6 +172,9 @@ class Grilo(GObject.GObject):
 
     @log
     def _on_source_added(self, pluginRegistry, mediaSource):
+        if "net:plaintext" in mediaSource.get_tags():
+            return
+
         id = mediaSource.get_id()
         logger.debug("new grilo source %s was added", id)
         try:


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]