Re: Declarative appletscript: last touches
On Thursday, December 9, 2010, Marco Martin wrote: > On Thursday 09 December 2010, Aaron J. Seigo wrote: > > On Thursday, December 9, 2010, Marco Martin wrote: > > > - plasmoids are not sanboxed at all anymore: it is possible to import > > > anyting from everybody (yes, a plasmoid could import kmail's pieces, > > > both a great feature and a curse at the same time), including c++ > > > plugis, -and- with absolute paths, but that has nothing we can do > > > about it > > > > ugh; sounds like something to bring up with the QML team post-4.6 then > > perhaps. oh well... :) > > yes: i want to attempt to propose an api for that: > defining whitelists for that would be good. Plasma::PluginLoader could also do this, and that's probably not a bad idea. i wonder if we want just whitelists, or if we should have a way to implement such a filter using C++, so that one could implement white lists, black lists, or any form of sophisticated runtime system (e.g. check cryptographic signatures) -- Aaron J. Seigo humru othro a kohnu se GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA EE75 D6B7 2EB1 A7F1 DB43 KDE core developer sponsored by Qt Development Frameworks signature.asc Description: This is a digitally signed message part. ___ Plasma-devel mailing list Plasma-devel@kde.org https://mail.kde.org/mailman/listinfo/plasma-devel
Re: Declarative appletscript: last touches
On Thursday, December 9, 2010, Marco Martin wrote: > - plasmoids are not sanboxed at all anymore: it is possible to import > anyting from everybody (yes, a plasmoid could import kmail's pieces, both > a great feature and a curse at the same time), including c++ plugis, -and- > with absolute paths, but that has nothing we can do about it ugh; sounds like something to bring up with the QML team post-4.6 then perhaps. oh well... :) -- Aaron J. Seigo humru othro a kohnu se GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA EE75 D6B7 2EB1 A7F1 DB43 KDE core developer sponsored by Qt Development Frameworks signature.asc Description: This is a digitally signed message part. ___ Plasma-devel mailing list Plasma-devel@kde.org https://mail.kde.org/mailman/listinfo/plasma-devel
Re: Declarative appletscript: last touches
Hey Marco! On Thursday 09 December 2010 00:32:44 Marco Martin wrote: > import "plasmapackage:/ui/MeegoComponents" > > in generic/ui there will be a MeegoComponents subfolder (in this case a > qmldirs file listing everything is needed) that folder will have a fallback. > it's better than nothing but still not overly pretty. This one seems the best so far? :) I'll try to brainstorm something but it seems you already spent a lot of time thinking about this issue. If I would need to choose between the 4 options that you gave, I would take the last one (the one above), even if it needs the qmldir file. Cheers! -- --- Artur Duque de Souza - MoRpHeUz --- http://claimid.com/morpheuz Blog: http://blog.morpheuz.cc PGP: 0xDBEEAAC3 @ wwwkeys.pgp.net --- signature.asc Description: This is a digitally signed message part. ___ Plasma-devel mailing list Plasma-devel@kde.org https://mail.kde.org/mailman/listinfo/plasma-devel
Re: Declarative appletscript: last touches
On Wednesday, December 8, 2010, Marco Martin wrote: > On Thursday 09 December 2010, Aaron J. Seigo wrote: > > On Wednesday, December 8, 2010, Marco Martin wrote: > > > import "../../generic/ui/" > > > > i take it that "../../generic/ui/" has to be a string literal in the QML > > file? and that it doesn't accept URLs (thereby going through the network > > access implementation)? if so, that would seem to be a major flaw in QML > > as it currently stands. > > it is possible, however only for full folders. > now i'm using a way i didn't tought before: > > import "plasmapackage:/ui/MeegoComponents" > > in generic/ui there will be a MeegoComponents subfolder (in this case a > qmldirs file listing everything is needed) that folder will have a > fallback. it's better than nothing but still not overly pretty. and we can always improve the underneath later, what's more important is having a non-fugly-api for the plasmoids we have to support forever on. sounds like a reasonable compromise. -- Aaron J. Seigo humru othro a kohnu se GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA EE75 D6B7 2EB1 A7F1 DB43 KDE core developer sponsored by Qt Development Frameworks signature.asc Description: This is a digitally signed message part. ___ Plasma-devel mailing list Plasma-devel@kde.org https://mail.kde.org/mailman/listinfo/plasma-devel
Re: Declarative appletscript: last touches
On Wednesday, December 8, 2010, Marco Martin wrote: > import "../../generic/ui/" i take it that "../../generic/ui/" has to be a string literal in the QML file? and that it doesn't accept URLs (thereby going through the network access implementation)? if so, that would seem to be a major flaw in QML as it currently stands. -- Aaron J. Seigo humru othro a kohnu se GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA EE75 D6B7 2EB1 A7F1 DB43 KDE core developer sponsored by Qt Development Frameworks signature.asc Description: This is a digitally signed message part. ___ Plasma-devel mailing list Plasma-devel@kde.org https://mail.kde.org/mailman/listinfo/plasma-devel
