This could be used for nefarious purposes, like hiding a script like in the button of doom in a plugin. Although neither script look at system or shadow tiddlers so something more than just importing the plugin would be needed. It would be possible for someone to make a normal tiddler with a harmful script in it and somehow trick you into importing it while you have these plugins.
Now I need to find a picture of nefarious porpoises. -- You received this message because you are subscribed to the Google Groups "TiddlyWiki" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/tiddlywiki. For more options, visit https://groups.google.com/d/optout.
