Isn't DCOP a security violation?

faq
flatforty
contribute
subscribe
configure
search
rdf

main
parent

Isn't DCOP a security violation?
by Greg on Thursday 27/Sep/2001, @10:29

isn't it?

Can't I create a link on an html page like:

exec:/path/to/some/program

And have konqui execute that program?

(Just wondering)

Related Links

·   Articles on Developer
·   Also by Greg
·   Contact author

The Fine Print: The following comments are owned by whomever posted them.
( Reply )

Re: Isn't DCOP a security violation?
by Richard Moore on Thursday 27/Sep/2001, @10:57

No, you can't. The exec protocol is only available to the about pages.

Rich.

[ Reply To This | View ]

Re: Isn't DCOP a security violation?
by not me on Thursday 27/Sep/2001, @11:30

How does Konqui decide whether or not to allow a page to execute stuff?

[ Reply To This | View ]

Re: Isn't DCOP a security violation?
by David Faure on Friday 28/Sep/2001, @05:24

The about page is a special KParts component (based on KHTML obviously).

There is no "one Konqui", there are many components in it.

No "exec:/" in an html page is going to do anything - AND, this has nothing to do with Javascript.

[ Reply To This | View ]

Re: Isn't DCOP a security violation?
by David Faure on Friday 28/Sep/2001, @05:27

> nothing to do with Javascript.
nor with DCOP either ;)

[ Reply To This | View ]

Re: Isn't DCOP a security violation?
by ik on Thursday 27/Sep/2001, @16:41

does that have something to do with dcop ?

[ Reply To This | View ]

The Fine Print: The previous comments are owned by whomever posted them.
( Reply )


		"You would know that after informal research, KDE developers prefer tea!" -- Roberto Alsina
KDE®, "K Desktop Environment", "KDE Dot News", "got the dot?" and the KDE Logo® are trademarks or registered trademarks of KDE e.V. in the European Union, the United States and other countries. All other trademarks and copyrights on this page are owned by their respective owners. Comments are owned by the poster. The rest: Copyright © 2000-2008 KDE e.V. for The KDE Project. For further information or comments on this site, please contact the Webmaster.