[Koha-bugs] [Bug 28655] new ideas/proposal to enhance pluggability

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28655

--- Comment #6 from David Cook <dcook at prosentient.com.au> ---
I admit that I'm intrigued by the overall premise though. I like the idea of
being able to upload plugins which can implement hooks that haven't previously
been defined.

That said... there could be some security implications. I mean... the whole
plugin infrastructure at the moment is a security problem. But allowing a
plugin to arbitrarily wrap functions could let a plugin completely take over
Koha in a rather insidious way which could be difficult to detect.

Of course, now I'm dreaming up potential exploits, which takes me back to bug
24632 to build a trust system so that the likelihood of running malicious code
is reduced...

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.