Aw: Re: New panel in trunk

[Brian J. Tarricone]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/14/2005 2:53 PM, Don Christensen wrote:
> Jasper Huijsmans wrote:
> 
>>Fabian Nowak schreef:
>>
>>
>>>launcher: ~ is not evaluated, this means executing ~/bin/someappstarter
>>>does not work, ~ has to be replaced manually.
>>
>>
>>Yeah. The panel is not a shell. If we want this, it is probably easier 
>>to execute everything with /bin/sh.
> 
> 
> It's also the easiest way to introduce security holes.  You would be
> better off just handling a few key things like maybe "~" and ENV var
> expansion (without backtick evaluation, of course).  You might be
> able to snarf code from bash or somewhere--the beauty of open source,
> right?

Or just use xfce_expand_variables():
http://www.xfce.org/documentation/api-4.2/libxfce4util/libxfce4util-Miscellaneous-Utilities.html#xfce-expand-variables

	-brian

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)

iD8DBQFDUCwb6XyW6VEeAnsRAgT4AJ4tqVV1omxGUXrmop9vX26Tv7ssbgCgysMy
560OC5lQg0fsjI2DmZ8oZHo=
=YnvU
-----END PGP SIGNATURE-----