strk wrote:

> But would still read them, which is a privacy issue.
> We need a directive to completely disable them
> (maybe set SOLSafedir /dev/null ?)

  I think that's a bit too extreme, which is why I prefer the read-only
option. Then Gnash can read .sol files, it just can't store anything to
them. As I've never found (yet, still looking) a .sol file with anything
remotely resembling privacy info, so I'm not support worried about these.

  Now LocalConnection, that's scary as it allows two way communication
between swf movies in a way that can't be protected. I can sniff the
memory segment between two movies, inject my own data. that's scary
stuff, so it should be disablable.

  bwy, thanks for adding the doc section I was too lazy to do, thanks!

        - rob -


_______________________________________________
Gnash-commit mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/gnash-commit

Reply via email to