incubator-callback-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joe Bowser <bows...@gmail.com>
Subject [Android] CB-1062 : Should a plugin be able to get an instance of any plugin via plugin manager?
Date Thu, 13 Sep 2012 19:15:36 GMT
Hey

So, this was a feature request and I can see how it can be useful, but
I can also see how an untrusted plugin can go and totally screw with
other plugins.  I know that we basically assume that developers who
use plugins know what they are doing, but after all the times we broke
plugins we know that this definitely isn't the case.  So, how do
people feel about this issue? Should we punt it and say that it's a
security risk because application devs can't read Java, or do we allow
it and warn plugin developers.

Any thoughts?

Joe

Mime
View raw message