> > urlgrabber/grabber.py | 32 ++++++++++++++++++++++++++------ > > 1 files changed, 26 insertions(+), 6 deletions(-) > > Assuming you've tested it, ACK.
Actually, on second thought, I'd rather not have this enabled by default. While the support of KDE/GNOME config tools is nice, the WPAD protocol seems quite scary. If I understand it correctly, an (not too hard to forge) DHCPINFORM reply instructs the library to grab an URL and run Javascript in it. Does the library drop root privileges before doing so? How secure is the JS sandbox? _______________________________________________ Yum-devel mailing list [email protected] http://lists.baseurl.org/mailman/listinfo/yum-devel
