[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 483: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 112: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 112: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 112: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/bbcode.php on line 112: preg_replace(): The /e modifier is no longer supported, use preg_replace_callback instead
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4668: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4670: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4671: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4672: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3815)
XWidgetSoft Forum :: View topic - Does xwidget need security options ?
XWidgetSoft Forum
https://bbs.xwidget.com/

Does xwidget need security options ?
https://bbs.xwidget.com/viewtopic.php?f=3&t=3150
Page 1 of 1

Author:  meme [ May 26th, 2013, 11:58 pm ]
Post subject:  Does xwidget need security options ?

Some of the code questions recently have be relating to accessing files on the uses computer and sending or receiving information from the net.
Is it possible that code written in a widget can do harm to your computer or be sending information from your computer via the net ?
If yes, do widgets need to have some form of security that prevent internet access unless allowed by the user, because giving xwidget access to the net in your firewall settings allows all widgets to access the net and do what ever they want.
If code in widgets can create or delete files on the users computer what prevents them from harming your computer when you first start a widget, virus scanners would not detect this script as a risk.

Are any of my concerns valid :?:

Author:  Jimking [ May 27th, 2013, 4:13 am ]
Post subject:  Re: Does xwidget need security options ?

Sorry meme but there absolutely NO REASON to worry about all these!!! Xwidget just using the codes/script takes info from YOUR computer hardware! And for the net is nothing to do with firewall settings or sending informations. The various script codes (not always used) are made by who create the widget and changing even a single "," doesn't work. Is like a designing software that you give the commands to your designs to work. The codes just NOT create or delete files on the computer!!! Tony surely can explain it better but enjoy XWidget without fear!

Author:  qiancang [ May 27th, 2013, 4:35 am ]
Post subject:  Re: Does xwidget need security options ?


Author:  meme [ May 27th, 2013, 8:09 pm ]
Post subject:  Re: Does xwidget need security options ?


Author:  qiancang [ May 27th, 2013, 11:15 pm ]
Post subject:  Re: Does xwidget need security options ?


Author:  meme [ May 28th, 2013, 12:49 am ]
Post subject:  Re: Does xwidget need security options ?


Author:  digigamer [ May 28th, 2013, 2:39 am ]
Post subject:  Re: Does xwidget need security options ?

In fact this is the issue Ms removed windows sidebar in windows 7 sp 1. I think it will be a good thing to implement a sandbox with permissions... something like that is done in Java

Author:  meme [ May 28th, 2013, 1:50 pm ]
Post subject:  Re: Does xwidget need security options ?

It is also similar to the risk that VBA macros have in MS office documents.
Some macros pose a potential security risk, a person with malicious intent can introduce a destructive macro, in a document or file, which can harm your computer or send information from your computer via the internet.
Maybe a similar approach can be used for xwidget code security. :?:

Author:  digigamer [ May 28th, 2013, 7:13 pm ]
Post subject:  Re: Does xwidget need security options ?

But it's difficult... you need to develop your own script engine (tremendous task). It will also increase the size of executable. Currently XWidget uses Windows Script Host. It has a security model but IMHO, it's too difficult to implement... Lets see if Tony, includes it.

Page 1 of 1 All times are UTC - 8 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/