User Beware: The Fine Line Between Content And Code
hackaday.com
Everyone loves themes. Doesn’t matter if it’s a text editor or a smart display in the kitchen, we want to be able to easily customize its look and feel to our liking. When setting up a …
    • pastermil@sh.itjust.works
      2·
      8 个月前

      Haven’t heard anything like that. Doesn’t mean for sure it’s not there, but if it is we would’ve heard of it, considering how popular GNOME is.

        • pastermil@sh.itjust.works
          3·
          8 个月前

          In theory: yes.

          In practice: depends on how things are implemented

          The jump from v5 to v6 is quite a big one. It is understandable things can fall thru the cracks.

          Nevertheless, allowing themes (especially of unknown source) to execute arbitrary code is never a good idea.

    • merthyr1831@lemmy.world
      1·
      8 个月前

      GNOME extensions aren’t themes, though. They’re executable by design and intuition; they’re basically applets.

      However, GNOME does have themes (hidden in the GNOME-Tweaks app) and AFAIK they’re purely CSS.

      • Possibly linuxOPEnglish
        1·
        8 个月前

        Well then I wonder if a gnome extension could take over your machine and attack other machines on the network