--- CV/bin/cv 2003/11/08 13:19:53 1.22 +++ CV/bin/cv 2003/11/12 00:59:02 1.23 @@ -83,6 +83,7 @@ $mainwin->visible ? $mainwin->hide : $mainwin->show_all; + 1; }); $schnauzer = new_schnauzer; @@ -90,6 +91,7 @@ $mainwin = new Gtk2::Window; $mainwin->set_title ("CV"); $mainwin->add (my $vbox = new Gtk2::VBox); + $mainwin->signal_connect (delete_event => sub { $mainwin->hide; 1; }); $vbox->add ($schnauzer); $vbox->pack_end (my $frame = new Gtk2::Frame, 0, 0, 0); @@ -166,8 +168,21 @@ ctrl-g generate icons for the selected files ctrl-d delete selected files WITHOUT ASKING AGAIN +=head1 SECURITY CONSIDERATIONS + +CV uses Pixbuf to load images. Pixbuf is not considered safe for this +purpose, though (from the gtk-2.2 release notes): + +"While efforts have been made to make gdk-pixbuf robust against invalid +images, using gdk-pixbuf to load untrusted data is not recommended, due to +the likelyhood that there are additional problems where an invalid image +could cause gdk-pixbuf to crash or worse." + =head1 BUGS/TODO + Pixbuf doesn't honor G_BROKEN_FILENAMES, so accessing files with names + incompatible with utf-8 fails. + rotate on disk print lots of ui issues