• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: Protocol Handling?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Protocol Handling?


  • Subject: Re: Protocol Handling?
  • From: Shawn Erickson <email@hidden>
  • Date: Fri, 22 Jun 2007 07:43:03 -0700


On Jun 21, 2007, at 2:30 PM, Oleg Kibirev wrote:

Note that the consequence of doing so is that any malicious web site will be able to launch your application and attempt to exploit the host by crafting URL parameters. After this issue was publicized, Apple patched OSX to only invoke URL handlers after the application was explicitly launched by user once to guard against handlers in just-downloaded DMGs.

Actually Mac OS X (as of 10.3 something) displays a dialog asking if you want to run the application in this situation. If you say yes then Mac OS X "trusts" the application and wont ask again in the future.


-Shawn
_______________________________________________

Cocoa-dev mailing list (email@hidden)

Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com

Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


References: 
 >Protocol Handling? (From: Rick Langschultz <email@hidden>)
 >Re: Protocol Handling? (From: "Shawn Erickson" <email@hidden>)
 >Re: Protocol Handling? (From: Oleg Kibirev <email@hidden>)

  • Prev by Date: Re: “Cure for n00b-ness” or “Cocoa Tutorials for the Rank Beginner”
  • Next by Date: KVC and arrays
  • Previous by thread: Re: Protocol Handling?
  • Next by thread: Re: Protocol Handling?
  • Index(es):
    • Date
    • Thread