Aw: Re: New panel in trunk

Jasper Huijsmans jasper at xfce.org
Sat Oct 15 09:09:32 CEST 2005


Brian J. Tarricone schreef:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 10/14/2005 2:53 PM, Don Christensen wrote:
> 
>>Jasper Huijsmans wrote:
>>
>>
>>>Fabian Nowak schreef:
>>>
>>>
>>>
>>>>launcher: ~ is not evaluated, this means executing ~/bin/someappstarter
>>>>does not work, ~ has to be replaced manually.
>>>
>>>
>>>Yeah. The panel is not a shell. If we want this, it is probably easier 
>>>to execute everything with /bin/sh.
>>
>>
>>It's also the easiest way to introduce security holes.  You would be
>>better off just handling a few key things like maybe "~" and ENV var
>>expansion (without backtick evaluation, of course).  You might be
>>able to snarf code from bash or somewhere--the beauty of open source,
>>right?
> 
> 
> Or just use xfce_expand_variables():
> http://www.xfce.org/documentation/api-4.2/libxfce4util/libxfce4util-Miscellaneous-Utilities.html#xfce-expand-variables
> 

I completely forgot about that! Very nice. Fabian, could you try now?



More information about the Xfce4-dev mailing list