[gnome-music] grilo: Don't leak information over http
- From: Marinus Schraal <mschraal src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [gnome-music] grilo: Don't leak information over http
- Date: Mon, 23 May 2016 11:49:19 +0000 (UTC)
commit 1d9ecd9c093bdb0d41d5a60aa5ceadfcb826f4c9
Author: Marinus Schraal <mschraal src gnome org>
Date: Thu May 12 21:23:12 2016 +0200
grilo: Don't leak information over http
Grilo can use sources that use insecure http connections, leaking
information about the users behaviour while doing so.
Disable all Grilo sources that use insecure connections by checking for
the net:plaintext tag.
https://bugzilla.gnome.org/show_bug.cgi?id=747953
gnomemusic/grilo.py | 3 +++
1 files changed, 3 insertions(+), 0 deletions(-)
---
diff --git a/gnomemusic/grilo.py b/gnomemusic/grilo.py
index 1bcad84..86a7eaf 100644
--- a/gnomemusic/grilo.py
+++ b/gnomemusic/grilo.py
@@ -172,6 +172,9 @@ class Grilo(GObject.GObject):
@log
def _on_source_added(self, pluginRegistry, mediaSource):
+ if "net:plaintext" in mediaSource.get_tags():
+ return
+
id = mediaSource.get_id()
logger.debug("new grilo source %s was added", id)
try:
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]