Re: [resend] freeze break: confirmation dialog for extension installation

2011-09-14 Thread Jasper St. Pierre
And thanks! Pushed...

On Tue, Sep 13, 2011 at 5:27 PM, Gil Forcada  wrote:
> El dt 13 de 09 de 2011 a les 18:04 +0200, en/na Gabor Kelemen va
> escriure:
>> 2011-09-11 23:43 keltezéssel, Owen Taylor írta:
>> > [ sent to gnome-18n last time, resend with the correct address ]
>> >
>> > As part of the work for extensions.gnome.org we've added a way to have
>> > the extensions.gnome.org website trigger downloading and installing
>> > an extension via a browser plugin. (The browser plugin and the download
>> > are locked to extension.gnome.org.)
>> >
>> > One thing that I pointed out in review was that I thought it was
>> > important to have an obviously client-side dialog before downloading and
>> > installing an extension - to make it clear to the user what is going on,
>> > and catch any funny business is going on.
>> >
>> > (E.g., XSS exploit on shell.gnome.org allows someone to script the
>> > plugin to download an extension they've snuck past code review.)
>> >
>> > https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html
>> >
>> > Adding this dialog requires a string freeze break to add the strings:
>> >
>> >    Download and install '%s' from extensions.gnome.org?
>> >    Install
>> >
>> > (First string still under discussion, but will be something like that.)
>> >
>> > Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612
>> >
>> Sounds serious enough. i18n approval 1/2.
>
> As usual, if Gabor things is worth I follow him with a 2/2 :)
>
> Cheers,
>
>> Regards
>> Gabor Kelemen
>> ___
>> gnome-i18n mailing list
>> gnome-i18n@gnome.org
>> http://mail.gnome.org/mailman/listinfo/gnome-i18n
>
>
> --
> Gil Forcada
>
> [ca] guifi.net - una xarxa lliure que no para de créixer
> [en] guifi.net - a non-stopping free network
> bloc: http://gil.badall.net
> planet: http://planet.guifi.net
>
>



-- 
  Jasper
___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n


Re: [resend] freeze break: confirmation dialog for extension installation

2011-09-13 Thread Gil Forcada
El dt 13 de 09 de 2011 a les 18:04 +0200, en/na Gabor Kelemen va
escriure:
> 2011-09-11 23:43 keltezéssel, Owen Taylor írta:
> > [ sent to gnome-18n last time, resend with the correct address ]
> >
> > As part of the work for extensions.gnome.org we've added a way to have
> > the extensions.gnome.org website trigger downloading and installing
> > an extension via a browser plugin. (The browser plugin and the download
> > are locked to extension.gnome.org.)
> >
> > One thing that I pointed out in review was that I thought it was
> > important to have an obviously client-side dialog before downloading and
> > installing an extension - to make it clear to the user what is going on,
> > and catch any funny business is going on.
> >
> > (E.g., XSS exploit on shell.gnome.org allows someone to script the
> > plugin to download an extension they've snuck past code review.)
> >
> > https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html
> >
> > Adding this dialog requires a string freeze break to add the strings:
> >
> >Download and install '%s' from extensions.gnome.org?
> >Install
> >
> > (First string still under discussion, but will be something like that.)
> >
> > Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612
> >
> Sounds serious enough. i18n approval 1/2.

As usual, if Gabor things is worth I follow him with a 2/2 :)

Cheers,

> Regards
> Gabor Kelemen
> ___
> gnome-i18n mailing list
> gnome-i18n@gnome.org
> http://mail.gnome.org/mailman/listinfo/gnome-i18n


-- 
Gil Forcada

[ca] guifi.net - una xarxa lliure que no para de créixer
[en] guifi.net - a non-stopping free network
bloc: http://gil.badall.net
planet: http://planet.guifi.net

___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n


Re: [resend] freeze break: confirmation dialog for extension installation

2011-09-13 Thread Gabor Kelemen

2011-09-11 23:43 keltezéssel, Owen Taylor írta:

[ sent to gnome-18n last time, resend with the correct address ]

As part of the work for extensions.gnome.org we've added a way to have
the extensions.gnome.org website trigger downloading and installing
an extension via a browser plugin. (The browser plugin and the download
are locked to extension.gnome.org.)

One thing that I pointed out in review was that I thought it was
important to have an obviously client-side dialog before downloading and
installing an extension - to make it clear to the user what is going on,
and catch any funny business is going on.

(E.g., XSS exploit on shell.gnome.org allows someone to script the
plugin to download an extension they've snuck past code review.)

https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html

Adding this dialog requires a string freeze break to add the strings:

   Download and install '%s' from extensions.gnome.org?
   Install

(First string still under discussion, but will be something like that.)

Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612


Sounds serious enough. i18n approval 1/2.

Regards
Gabor Kelemen
___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n


[resend] freeze break: confirmation dialog for extension installation

2011-09-11 Thread Owen Taylor
[ sent to gnome-18n last time, resend with the correct address ]

As part of the work for extensions.gnome.org we've added a way to have
the extensions.gnome.org website trigger downloading and installing
an extension via a browser plugin. (The browser plugin and the download
are locked to extension.gnome.org.)

One thing that I pointed out in review was that I thought it was
important to have an obviously client-side dialog before downloading and
installing an extension - to make it clear to the user what is going on,
and catch any funny business is going on.

(E.g., XSS exploit on shell.gnome.org allows someone to script the
plugin to download an extension they've snuck past code review.)

https://mail.gnome.org/archives/desktop-devel-list/2011-August/msg00242.html

Adding this dialog requires a string freeze break to add the strings:
 
  Download and install '%s' from extensions.gnome.org?
  Install

(First string still under discussion, but will be something like that.)

Current patch on: https://bugzilla.gnome.org/show_bug.cgi?id=658612

Thanks!

- Owen



___
gnome-i18n mailing list
gnome-i18n@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-i18n