kioexec

[Gary L. Greene, Jr.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 26 September 2003 07:47 am, Andras Mantia wrote:
> Hi,
>
>  I just noticed that kdelibs/kio/kioexec is not built by default.
> Shouldn't the compilation of this directory enabled in the
> kdelibs/kio/Makefile.am?
>
> Andras

Andras, the reason it isn't built by default is that it is busted.

When you click an an exec:/ link, it's supposed to check if the request was 
made from off a local or remote html file before executing the application. 
The problem comes in when it tests for this condition. A change in the 
kio-framework a while back changed the output of the call that kioexec uses 
to test this. Because of this, it never sees that the file is local, only 
remote, and then prompts your with a security pop-up explaining the dangers 
of clicking a link that calls a local application.

While it's argueably more secure teh way it is now, this is far from teh 
behaviour that kioexec was supposed to do.

- -- 
Gary L. Greene, Jr.
Sent from uriel.gvsu.edu
  7:53am  up 1 day 12:46,  2 users,  load average: 0.03, 0.11, 0.37
Ark Linux - H2O (1.0-0.alpha8.2ark)
============================================================
Volunteer developer for the Ark Linux Project
 check out http://www.arklinux.org/ for more info.
 Also http://www.csis.gvsu.edu/~greeneg/
PHONE : (616) 331-0849
EMAIL : greeneg at arklinux.org
============================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/dCq6GOZfXmw2wrwRAv0/AJ9g873QybRJEvOWqmTiL/DfPj8BwwCfc8Jo
fyLoeAkj4KrlZO/NbkE2zzc=
=6mFC
-----END PGP SIGNATURE-----