<html>
<head>
<base href="https://bugzilla.gnome.org/" />
</head>
<body><span class="vcard"><a href="page.cgi?id=describeuser.html&login=florian.muellner%40gmail.com" title="Florian Müllner <florian.muellner@gmail.com>"> <span class="fn">Florian Müllner</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - Shell search provider doesn't work with Wayland"
href="https://bugzilla.gnome.org/show_bug.cgi?id=775099">bug 775099</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>florian.muellner@gmail.com
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - Shell search provider doesn't work with Wayland"
href="https://bugzilla.gnome.org/show_bug.cgi?id=775099#c13">Comment # 13</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - Shell search provider doesn't work with Wayland"
href="https://bugzilla.gnome.org/show_bug.cgi?id=775099">bug 775099</a>
from <span class="vcard"><a href="page.cgi?id=describeuser.html&login=florian.muellner%40gmail.com" title="Florian Müllner <florian.muellner@gmail.com>"> <span class="fn">Florian Müllner</span></a>
</span></b>
<pre>(In reply to Bastien Nocera from <a href="show_bug.cgi?id=775099#c10">comment #10</a>)
<span class="quote">> Tangentially, Florian, won't this particular call be a security problem if
> applications can talk to the shell for their search providers?</span >
Yeah, it's an issue when apps are allowed to talk to any name owned by the
shell. It's not something apps are expected to do (including for search
providers, which actually work the other way round, i.e. the shell talking to
the app)), in particular when sandboxed.
Still, we may want to consider turning it off by default ('development-tools'
in org.gnome.shell) ...</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>