Re: Script Library Search Order changed starting in 10.11.3
Re: Script Library Search Order changed starting in 10.11.3
- Subject: Re: Script Library Search Order changed starting in 10.11.3
- From: Chris Page <email@hidden>
- Date: Thu, 21 Jan 2016 18:15:33 -0800
Starting in 10.11.3 the new script-library search-domain order is:
1. The bundle of the script that references the library.
2. The bundle of the application process that is running the script that references the library.
3. The OSA_LIBRARY_PATH environment variable.
4. The user domain: ~/Library
5. The local domain: /Library
6. The network domain: /Network/Library
7. The system domain: /System/Library
8. Application bundles: ./Contents/Library
Application bundles are now searched last. That's the only change to the order.
--
Chris Page
The other, other AppleScript Chris
> On Jan 19, 2016, at 5:04 PM, Martin Orpen <email@hidden> wrote:
>
> On 14 Jan 2016, at 04:12, Chris Page <email@hidden> wrote:
>>
>> As mentioned recently, the Script Library search order is incorrectly documented in the current AppleScript Language Guide. The order is:
>>
>> 1. The bundle of the script that references the library.
>> 2. The bundle of the application process that is running the script that references the library.
>> 3. The OSA_LIBRARY_PATH environment variable.
>> 4. The user domain: ~/Library
>> 5. Application bundles: ./Contents/Library
>> 6. The local domain: /Library
>> 7. The network domain: /Network/Library
>> 8. The system domain: /System/Library
>
> Today’s Security Update:
>
> OSA Scripts
> Available for: OS X El Capitan v10.11 to v10.11.2
> Impact: A quarantined application may be able to override OSA script
> libraries installed by the user
> Description: An issue existed when searching for scripting
> libraries. This issue was addressed through improved search order and
> quarantine checks.
> CVE-ID
> CVE-2016-1729 : an anonymous researcher
_______________________________________________
Do not post admin requests to the list. They will be ignored.
AppleScript-Users mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
Archives: http://lists.apple.com/archives/applescript-users
This email sent to email@hidden