Go to file

JerryXiao 860f3062d4 gnome 46		2024-03-24 12:29:44 +08:00
eval-gjs@ramottamado.dev	gnome 46	2024-03-24 12:29:44 +08:00
LICENSE	Add docs to codes	2022-11-07 08:52:37 +07:00
Makefile	First commit	2021-09-25 12:11:01 +07:00
README.md	gnome 45	2023-10-15 22:50:46 +08:00

README.md

POTENTIAL SECURITY BREACH

This extension enables arbitrary code execution via Eval() dbus method. This means when you enable this extension, malicious apps, extensions or scripts can call the said dbus method and run malicious GJS codes on your machine.

Eval GJS GNOME Shell Extension

As of GNOME 41, the dbus method Eval() is now restricted with MetaContext:unsafe-mode property (see this commit). This extension provides unrestricted Eval() dbus method for running arbitrary code in the compositor.

Features

Run arbitrary GJS code like you would with GNOME Eval() dbus method.
Main, Gio, GLib and Meta available by default.

Installation

git clone git://github.com/ramottamado/eval-gjs.git
cd eval-gjs
make install

Example Usage

gdbus call \
  --session \
  --dest org.gnome.Shell \
  --object-path /dev/ramottamado/EvalGjs \
  --method dev.ramottamado.EvalGjs.Eval "Main.overview.show();"