[security] Auto-upgrade by powershell command is insecurity in most scenarios. winget/msstore would be a better way.

Bin-Huang / chatbox

User-friendly Desktop Client App for AI Models/LLMs (GPT, Claude, Gemini, Ollama...)

https://chatboxai.app

GNU General Public License v3.0

23.14k stars 2.3k forks source link

[security] Auto-upgrade by powershell command is insecurity in most scenarios. winget/msstore would be a better way. #720

Open wxxb789 opened 1 year ago

wxxb789 commented 1 year ago

So far, the chatbox is the best chatgpt client app on windows. But in most enterprise network environment, auto-upgrade by powershell command is disallowed by policy.

So that, publish the app to winget or msstore is a better way.

Bin-Huang commented 1 year ago

Because I rarely use Windows, is this issue also present in version v0.6.x?

wxxb789 commented 1 year ago

I was asked to uninstall this app in company env. If it still uses powershell script and add bypass policy as parameter. I think the issue is still there.