User Beware: The Fine Line Between Content And Code
hackaday.com
Everyone loves themes. Doesn’t matter if it’s a text editor or a smart display in the kitchen, we want to be able to easily customize its look and feel to our liking. When setting up a …
  • pastermil@sh.itjust.works
    3·
    8 months ago

    In theory: yes.

    In practice: depends on how things are implemented

    The jump from v5 to v6 is quite a big one. It is understandable things can fall thru the cracks.

    Nevertheless, allowing themes (especially of unknown source) to execute arbitrary code is never a good idea.