Skip to main content
Search titles, bodies, and author names
Found 10,653 posts across 1 forum.

Widget auto-install = huge security hole? — #40

Quote: Originally Posted by wtmcgee To me, it doesn't seem like it's as big a deal as some are making it out to be. Yes it is, however, from what I have read, fixing it see…
MacNN Software by Pierre B.

Widget auto-install = huge security hole? — #41

Quote: Originally Posted by wtmcgee Just curious: Widgets are, on their most basic level, CSS/XHTML/Javascript. As long as the dashboard app only runs widgets that have that c…
MacNN Software by Mithras

Widget auto-install = huge security hole? — #43

Here's what else they could do, and it's far worse than either openURL or openApplication: Quote: Originally Posted by Apple Developer Documentation system Executes a command-…
MacNN Software by CharlesS

Widget auto-install = huge security hole? — #44

Quote: Originally Posted by CharlesS This is almost the exact same thing as on Windows IE when you browse to a site and it decides it will install some custom toolbar or other s…
MacNN Software by Person Man

Widget auto-install = huge security hole? — #45

Quote: Originally Posted by Person Man Well, not exactly. It's not a "bitch to get rid of" a widget... It is if you're a novice user and don't know about ~/Library/Widgets. …
MacNN Software by CharlesS

Widget auto-install = huge security hole? — #46

Quote: Originally Posted by CharlesS Here's what else they could do, and it's far worse than either openURL or openApplication: So all a widget needs to do is widget.system("r…
MacNN Software by misc

Widget auto-install = huge security hole? — #47

Quote: Originally Posted by misc Doesn't running system commands require the "Are you sure?" agreed to? And what stops the widget from not displaying this and/or automatically a…
MacNN Software by CharlesS

Widget auto-install = huge security hole? — #48

Quote: Originally Posted by CharlesS 1. It's already been shown that a site can make a widget look just like one of the default Apple ones. 2. If a user isn't intimately famili…
MacNN Software by misc

Widget auto-install = huge security hole? — #49

Quote: Originally Posted by misc Right, I understand that. But by doing a 'rm -fr' command from within a widget, Dashboard will raise the red flag and say "You sure?" Right? …
MacNN Software by Mithras

Widget auto-install = huge security hole? — #50

Nope! Your " Calculator" widget did not ask me for any kind of confirmation at all. It just ran, said its nasty little message, and displayed "EVIL" on the screen. From the looks …
MacNN Software by CharlesS

Rotate image 90 degrees in Javascript or CSS? — #4

If it can be done in javascript, I don't know how to do it. It can, however, be done server-side with php and GD Library or ImageMagick. If you have access to those technologies,…
MacNN Software by registered_user

Rotate image 90 degrees in Javascript or CSS? — #5

You could also rotate it 90 degrees yourself, using an image editor, and store it as a separate file. This will take up a bit more disk space, but it is the fastest option from the…
MacNN Software by Millennium

Rotate image 90 degrees in Javascript or CSS? — #6

Quote: Originally Posted by Millennium You could also rotate it 90 degrees yourself, using an image editor, and store it as a separate file. This will take up a bit more disk sp…
MacNN Software by moonmonkey
mp.ls