search

moe-serifu-circle / moe-serifu-agent

Anime-themed personal assistant and goal-oriented intelligent agent
GNU Lesser General Public License v3.0
41 stars 7 forks source link

Secure plugin API #1

Open dekarrin opened 7 years ago

dekarrin commented 7 years ago

Plugins can modify system state to override settings of other plugins. Plugin calls should be segmented to avoid this.

A/C: A malicious plugin that attempts to modify the state of other plugins has no way to do so. Check this by first creating a malicious plugin which does such modification, then show that such a plugin doesn't work after changes are applied.

dekarrin commented 5 years ago

Closely related to #62; we'll include this in the A/C of that one, which makes this a duplicate issue.

dekarrin commented 5 years ago

Mm, #62 is a separate task. Can still secure the API after the conversion is applied. This issue stays open.