[vlc-devel] libvlc_media_option_trusted and security

[Rémi Denis-Courmont]

Le mardi 18 septembre 2012 19:02:40, Shane Phelan a écrit :
> Are there changes that could be made that would satisfy the security
> concerns?

Everything is possible if someone cares to write the code.

> I'm want to explore creating UI so that the user has to select the file
> path themselves where the plugin could write the file.  It would also
> disallowed the file record via playlist options and if it's possible set
> the libvlc_media_option_trusted only at runtime when a record button was
> pressed so that someone couldn't run rogue javascript without the user
> knowing?

Telling the user that his/her computer might be hacked is not acceptable.
The computer shall not be hacked and that is all.

-- 
Rémi Denis-Courmont
http://www.remlab.net/