Arbitrary code execution by visiting a web page trumps, IMO. Maybe add an assert if flash or widevine are enabled so the eval fails with a useful message?
Graham Christensen <[email protected]> writes: >> It would be great to have clarity on the situation, so if anyone wants to >> test, you can grab a build on aszlig's hydra, instead of building your own, >> by `nix-install-package --non-interactive --url >> https://headcounter.org/hydra/build/1418328/nix/pkg/chromium-54.0.2840.90-x86_64-linux.nixpkg` > > > I built Chromium with pepper flash and with widevine enabled, and still > find myself with broken Netflix, and no WideVine or Flash reporting in > the chromium://components pages. Not sure what to make of this. > >> Yeah, please merge this immediately. > > I would normally agree, but shipping users updates that break one of > their most important tools seems pretty wrong to me. > > Graham > _______________________________________________ > nix-dev mailing list > [email protected] > http://lists.science.uu.nl/mailman/listinfo/nix-dev
signature.asc
Description: PGP signature
_______________________________________________ nix-dev mailing list [email protected] http://lists.science.uu.nl/mailman/listinfo/nix-dev
