Re: [resend] freeze break: confirmation dialog for extension installation

2011-09-14 Thread Jasper St. Pierre
And thanks! Pushed...

On Tue, Sep 13, 2011 at 5:27 PM, Gil Forcada gforc...@gnome.org wrote:
 El dt 13 de 09 de 2011 a les 18:04 +0200, en/na Gabor Kelemen va
 escriure:
 2011-09-11 23:43 keltezéssel, Owen Taylor írta:
  [ sent to gnome-18n last time, resend with the correct address ]
 
  As part of the work for extensions.gnome.org we've added a way to have
  the extensions.gnome.org website trigger downloading and installing
  an extension via a browser plugin. (The browser plugin and the download
  are locked to extension.gnome.org.)
 
  One thing that I pointed out in review was that I thought it was
  important to have an obviously client-side dialog before downloading and
  installing an extension - to make it clear to the user what is going on,
  and catch any funny business is going on.
 
  (E.g., XSS exploit on shell.gnome.org allows someone to script the
  plugin to download an extension they've snuck past code review.)
 
  https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html
 
  Adding this dialog requires a string freeze break to add the strings:
 
     Download and install '%s' from extensions.gnome.org?
     Install
 
  (First string still under discussion, but will be something like that.)
 
  Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612
 
 Sounds serious enough. i18n approval 1/2.

 As usual, if Gabor things is worth I follow him with a 2/2 :)

 Cheers,

 Regards
 Gabor Kelemen
 ___
 gnome-i18n mailing list
 gnome-i18n@gnome.org
 http://mail.gnome.org/mailman/listinfo/gnome-i18n


 --
 Gil Forcada

 [ca] guifi.net - una xarxa lliure que no para de créixer
 [en] guifi.net - a non-stopping free network
 bloc: http://gil.badall.net
 planet: http://planet.guifi.net





-- 
  Jasper
___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n


Re: [resend] freeze break: confirmation dialog for extension installation

2011-09-13 Thread Gabor Kelemen

2011-09-11 23:43 keltezéssel, Owen Taylor írta:

[ sent to gnome-18n last time, resend with the correct address ]

As part of the work for extensions.gnome.org we've added a way to have
the extensions.gnome.org website trigger downloading and installing
an extension via a browser plugin. (The browser plugin and the download
are locked to extension.gnome.org.)

One thing that I pointed out in review was that I thought it was
important to have an obviously client-side dialog before downloading and
installing an extension - to make it clear to the user what is going on,
and catch any funny business is going on.

(E.g., XSS exploit on shell.gnome.org allows someone to script the
plugin to download an extension they've snuck past code review.)

https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html

Adding this dialog requires a string freeze break to add the strings:

   Download and install '%s' from extensions.gnome.org?
   Install

(First string still under discussion, but will be something like that.)

Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612


Sounds serious enough. i18n approval 1/2.

Regards
Gabor Kelemen
___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n


Re: [resend] freeze break: confirmation dialog for extension installation

2011-09-13 Thread Gil Forcada
El dt 13 de 09 de 2011 a les 18:04 +0200, en/na Gabor Kelemen va
escriure:
 2011-09-11 23:43 keltezéssel, Owen Taylor írta:
  [ sent to gnome-18n last time, resend with the correct address ]
 
  As part of the work for extensions.gnome.org we've added a way to have
  the extensions.gnome.org website trigger downloading and installing
  an extension via a browser plugin. (The browser plugin and the download
  are locked to extension.gnome.org.)
 
  One thing that I pointed out in review was that I thought it was
  important to have an obviously client-side dialog before downloading and
  installing an extension - to make it clear to the user what is going on,
  and catch any funny business is going on.
 
  (E.g., XSS exploit on shell.gnome.org allows someone to script the
  plugin to download an extension they've snuck past code review.)
 
  https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html
 
  Adding this dialog requires a string freeze break to add the strings:
 
 Download and install '%s' from extensions.gnome.org?
 Install
 
  (First string still under discussion, but will be something like that.)
 
  Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612
 
 Sounds serious enough. i18n approval 1/2.

As usual, if Gabor things is worth I follow him with a 2/2 :)

Cheers,

 Regards
 Gabor Kelemen
 ___
 gnome-i18n mailing list
 gnome-i18n@gnome.org
 http://mail.gnome.org/mailman/listinfo/gnome-i18n


-- 
Gil Forcada

[ca] guifi.net - una xarxa lliure que no para de créixer
[en] guifi.net - a non-stopping free network
bloc: http://gil.badall.net
planet: http://planet.guifi.net

___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n


[resend] freeze break: confirmation dialog for extension installation

2011-09-11 Thread Owen Taylor
[ sent to gnome-18n last time, resend with the correct address ]

As part of the work for extensions.gnome.org we've added a way to have
the extensions.gnome.org website trigger downloading and installing
an extension via a browser plugin. (The browser plugin and the download
are locked to extension.gnome.org.)

One thing that I pointed out in review was that I thought it was
important to have an obviously client-side dialog before downloading and
installing an extension - to make it clear to the user what is going on,
and catch any funny business is going on.

(E.g., XSS exploit on shell.gnome.org allows someone to script the
plugin to download an extension they've snuck past code review.)

https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html

Adding this dialog requires a string freeze break to add the strings:
 
  Download and install '%s' from extensions.gnome.org?
  Install

(First string still under discussion, but will be something like that.)

Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612

Thanks!

- Owen



___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n