Does GIMP plan to adopt a manifest-based plugin loading mechanism for Python-Fu to improve security?
0 reputation · 06 Jun 2023, 08:03 UTC
Goal: Determine whether GIMP will introduce a manifest‑based plugin loading mechanism for its Python‑Fu subsystem to strengthen script sandboxing.
Current behavior relies on the presence of executable script files in platform‑specific search paths, which offers limited protection against untrusted code placed in those directories. The uncertainty stems from the absence of an official roadmap and the need to maintain backward compatibility with existing Python‑Fu scripts across Windows, Linux, and macOS.
Does GIMP have a planned timeline for manifest‑based plugin loading? How would existing Python‑Fu scripts need to adapt to a manifest system? What security guarantees would a manifest provide compared to the current permission‑based approach?