874
edits
Changes
→Security Extensibility: fixed a TODO
* The '''Default Command Feed Plugin''' encapsulates Ubiquity 0.1's implementation for command feeds, which assumes that all subscribed-to command feeds are trusted and gives them full control over the end-user's system; it also warns the user when they attempt to subscribe to a feed that's served by an untrusted host or is sent over an insecure connection.
* The '''Locked-Down Command Feed Plugin''' is a trivial proof-of-concept Feed Plugin that can be used to create simple commands that operate on plaintext and don't use the network, such as "uppercase". While completely secure, it's also extremely restrictive. The aim of 0.2 is to provide the infrastructure and tools for new, more secure yet flexible Feed Plugins to arise that will eventually replace the default.
Possibilities for Feed Plugins include:
