User Beware: The Fine Line Between Content And Code
hackaday.com
Everyone loves themes. Doesn’t matter if it’s a text editor or a smart display in the kitchen, we want to be able to easily customize its look and feel to our liking. When setting up a …
    • pastermil@sh.itjust.works
      3·
      8 months ago

      In theory: yes.

      In practice: depends on how things are implemented

      The jump from v5 to v6 is quite a big one. It is understandable things can fall thru the cracks.

      Nevertheless, allowing themes (especially of unknown source) to execute arbitrary code is never a good idea.