extensionSystem: Replace manifest system with a more direct approach
For security reasons, we shouldn't allow the Shell to download and install any extension URL. https://bugzilla.gnome.org/show_bug.cgi?id=658612
This commit is contained in:
@ -46,7 +46,7 @@ const GnomeShellIface = {
|
||||
outSignature: ''
|
||||
},
|
||||
{ name: 'InstallRemoteExtension',
|
||||
inSignature: 's',
|
||||
inSignature: 'ss',
|
||||
outSignature: ''
|
||||
}
|
||||
],
|
||||
@ -174,8 +174,8 @@ GnomeShell.prototype = {
|
||||
global.settings.set_strv(ExtensionSystem.ENABLED_EXTENSIONS_KEY, enabledExtensions);
|
||||
},
|
||||
|
||||
InstallRemoteExtension: function(uuid, url) {
|
||||
ExtensionSystem.installExtensionFromManifestURL(uuid, url);
|
||||
InstallRemoteExtension: function(uuid, version_tag) {
|
||||
ExtensionSystem.installExtensionFromUUID(uuid, version_tag);
|
||||
},
|
||||
|
||||
get OverviewActive() {
|
||||
@ -189,7 +189,7 @@ GnomeShell.prototype = {
|
||||
Main.overview.hide();
|
||||
},
|
||||
|
||||
ApiVersion: 1,
|
||||
ApiVersion: ExtensionSystem.API_VERSION,
|
||||
|
||||
ShellVersion: Config.PACKAGE_VERSION,
|
||||
|
||||
|
Reference in New Issue
Block a user