Don't ever sniff desktop files when the filename is known. In other words,
authorAlexander Larsson <alexl@redhat.com>
Fri, 20 Feb 2009 07:46:57 +0000 (07:46 +0000)
committerAlexander Larsson <alexl@src.gnome.org>
Fri, 20 Feb 2009 07:46:57 +0000 (07:46 +0000)
commit9fdf70ba5f1b997181501ca81e69343c650c9bed
treeef938d717af7e75beba5d38688fde7a2ac64006b
parent25e5d1ba2c3253f2a05d1771e6839aab587d8346
Don't ever sniff desktop files when the filename is known. In other words,

2009-02-20  Alexander Larsson  <alexl@redhat.com>

        * gcontenttype.c:
        (g_content_type_guess):
Don't ever sniff desktop files when the filename is known.
In other words, only allow desktop files with the .desktop extension
and when the filename isn't known.
This is a security precaution since desktop files can execute
arbitrary code when launched and we don't want to allow them to
try and hide as another type. There is no legit reason to not
have the .desktop extension anyway.

svn path=/trunk/; revision=7892
gio/ChangeLog
gio/gcontenttype.c