Author Topic: "Block potentially harmful profile actions" - Block commands executed externally  (Read 2317 times)

Pfeil

  • Global Moderator
  • Hero Member
  • *****
  • Posts: 4782
  • RTFM
The new "Block potentially harmful profile actions" option does not block executing commands through external means, be it the "-command" command line parameter, or even a plugin using "ExecuteCommand()".

Especially the latter may occur in profiles that use a plugin like EDDI to trigger a number of commands, the actions of which may be unwanted.


While it is possible to use the "Disable plugin support" option in the load options or the "Enable Plugin Support" option in the regular options menu, if this new "Block potentially harmful profile actions" option in intended as a feature to allow profile inspection before command execution, adding blocking of externally executed commands may be desirable.


EDIT: Tested with command line parameter in v1.7.5, execution is now blocked.
« Last Edit: April 04, 2019, 04:49:51 PM by Pfeil »

Gary

  • Administrator
  • Hero Member
  • *****
  • Posts: 2832
Those probably should be blocked, as you can't be too sure that the user is going to disable plugin support.