Re: [resend] freeze break: confirmation dialog for extension installation

["Jasper St. Pierre" <jstpierre mecheye net>]

And thanks! Pushed...

On Tue, Sep 13, 2011 at 5:27 PM, Gil Forcada <gforcada gnome org> wrote:
> El dt 13 de 09 de 2011 a les 18:04 +0200, en/na Gabor Kelemen va
> escriure:
>> 2011-09-11 23:43 keltezéssel, Owen Taylor írta:
>> > [ sent to gnome-18n last time, resend with the correct address ]
>> >
>> > As part of the work for extensions.gnome.org we've added a way to have
>> > the extensions.gnome.org website trigger downloading and installing
>> > an extension via a browser plugin. (The browser plugin and the download
>> > are locked to extension.gnome.org.)
>> >
>> > One thing that I pointed out in review was that I thought it was
>> > important to have an obviously client-side dialog before downloading and
>> > installing an extension - to make it clear to the user what is going on,
>> > and catch any funny business is going on.
>> >
>> > (E.g., XSS exploit on shell.gnome.org allows someone to script the
>> > plugin to download an extension they've snuck past code review.)
>> >
>> > https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html
>> >
>> > Adding this dialog requires a string freeze break to add the strings:
>> >
>> >    Download and install '%s' from extensions.gnome.org?
>> >    Install
>> >
>> > (First string still under discussion, but will be something like that.)
>> >
>> > Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612
>> >
>> Sounds serious enough. i18n approval 1/2.
>
> As usual, if Gabor things is worth I follow him with a 2/2 :)
>
> Cheers,
>
>> Regards
>> Gabor Kelemen
>> _______________________________________________
>> gnome-i18n mailing list
>> gnome-i18n gnome org
>> http://mail.gnome.org/mailman/listinfo/gnome-i18n
>
>
> --
> Gil Forcada
>
> [ca] guifi.net - una xarxa lliure que no para de créixer
> [en] guifi.net - a non-stopping free network
> bloc: http://gil.badall.net
> planet: http://planet.guifi.net
>
>



-- 
  Jasper