RE: Plugin Install Hooks

2015-02-10 Thread Horn, Julian C
to be installed anyway. I would also expect that --suppress-hooks would suppress pre_package time hooks too. Julian -Original Message- From: Shazron [mailto:shaz...@gmail.com] Sent: Monday, February 09, 2015 4:21 PM To: dev@cordova.apache.org Subject: Re: Plugin Install Hooks We

Re: Plugin Install Hooks

2015-02-10 Thread Andrew Grieve
. The build server doesn’t trust the plugins you trust. -Original Message- From: mmo...@google.com [mailto:mmo...@google.com] On Behalf Of Michal Mocny Sent: Tuesday, February 10, 2015 11:27 AM To: Michal Mocny Cc: dev Subject: Re: Plugin Install Hooks ..Not to mention

RE: Plugin Install Hooks

2015-02-10 Thread Horn, Julian C
, February 10, 2015 11:27 AM To: Michal Mocny Cc: dev Subject: Re: Plugin Install Hooks ..Not to mention, these plugins will be running on end users' personal devices. That sounds vastly more concerning than running hooks on a server you control and can sandbox. On Tue, Feb 10, 2015 at 11:25 AM

Re: Plugin Install Hooks

2015-02-10 Thread Michal Mocny
: Re: Plugin Install Hooks We did discuss this, and we rejected: 1. Having a prompt 2. Sandboxing Check out the discussion, for reasons: http://markmail.org/message/alknczhqdghaurrw On Mon, Feb 9, 2015 at 8:28 AM, Horn, Julian C julian.c.h...@intel.com wrote: We have identified a security

Re: Plugin Install Hooks

2015-02-10 Thread Michal Mocny
PM To: dev@cordova.apache.org Subject: Re: Plugin Install Hooks We did discuss this, and we rejected: 1. Having a prompt 2. Sandboxing Check out the discussion, for reasons: http://markmail.org/message/alknczhqdghaurrw On Mon, Feb 9, 2015 at 8:28 AM, Horn, Julian C julian.c.h...@intel.com

Re: Plugin Install Hooks

2015-02-10 Thread Michal Mocny
Subject: Re: Plugin Install Hooks ..Not to mention, these plugins will be running on end users' personal devices. That sounds vastly more concerning than running hooks on a server you control and can sandbox. On Tue, Feb 10, 2015 at 11:25 AM, Michal Mocny mmo...@chromium.org wrote: So, I

Re: Plugin Install Hooks

2015-02-09 Thread Shazron
We did discuss this, and we rejected: 1. Having a prompt 2. Sandboxing Check out the discussion, for reasons: http://markmail.org/message/alknczhqdghaurrw On Mon, Feb 9, 2015 at 8:28 AM, Horn, Julian C julian.c.h...@intel.com wrote: We have identified a security issue with the recently added