Wednesday, November 23, 2011

RE: Dubious scripts at vim.org

Marc Weber wrote:
>> Besides being potentially dangerous to Windows users,
>> distribution of .exe files as "scripts" runs counter to the
>> idea that scripts' execution depends on Vim alone, and not
>> on a particular operating system.
>
> So do we all agree that Vim is missing a :call
> download('http://','destination') function?
> Then scripts could ask and download exe files for the user.
> I'd also vote for an md5 implementation then so that the
> download can be verified?

The problem is that a plugin author has something that works
with, say, Exuberant Ctags so they want people who download the
plugin to have that utility.

The solution is to include a link to the official distribution
in the plugin documentation.

> Its not an arbitrary executable, its ctags.

It's probably a particular version of someone's ctags. But it
might be a hacked version which installs a keylogger.

John

--
You received this message from the "vim_use" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php

No comments: