Diffusion KAuth fc70fb0161c1

Remove support for passing gui QVariants to KAuth helpers

Authored by aacid on Feb 2 2019, 1:35 PM.

Description

Remove support for passing gui QVariants to KAuth helpers

Supporting gui variants is very dangerous since they can end up triggering
image loading plugins which are one of the biggest vectors for crashes, which
for very smart people mean possible code execution, which is very dangerous
in code that is executed as root.

We've checked all the KAuth helpers inside KDE git and none seems to be using
gui variants, so we're not actually limiting anything that people wanted to do.

Reviewed by security@kde.org and Aleix Pol

Issue reported by Fabian Vogt

Details

Committed
aacidFeb 2 2019, 1:35 PM
Parents
R283:8c776fedf7d0: GIT_SILENT Upgrade KF5 version to 5.55.0.
Branches
Unknown
Tags
Unknown