[vlc-devel] [PATCH 2/2] Introduce vlc://shutdown to power off the computer

[Ludovic Fauvet]

On Tue, Apr 16, 2013 at 8:33 PM, Rémi Denis-Courmont <remi at remlab.net> wrote:
> Le mardi 16 avril 2013 21:19:30, Ludovic Fauvet a écrit :
>> ---
>>  modules/access/idummy.c |   20 ++++++++++++++++++++
>>  1 file changed, 20 insertions(+)
>
> And next someone posts a vlc://shutdown link on Twitter. It will be fun!!
>
> Come on...
>
> See also fdebeceeb5cd7a33c6bcb717a13d95f81b81a0b8
> and then a0db104db95f20dd518709b239faa70cfe2e86fc

A good way to circumvent this issue would be to disable all vlc://
URIs in the web plugins (if not already done) but I'm not sure this is
enough since it should also be technically possible to force a VLC
client to execute this action through an HTTP redirect to
vlc://shutdown (or vlc://quit).

Do we have a secure alternative to provide the feature to the command
line or should I completely forget the idea of having a special URI
for that?

--
Ludovic Fauvet
www.videolan.org