eval-gjs@ramottamado.dev | ||
LICENSE | ||
Makefile | ||
README.md |
POTENTIAL SECURITY BREACH
This extension enables arbitrary code execution via Eval()
dbus method. This means when you enable this extension, malicious apps, extensions or scripts can call the said dbus method and run malicious GJS codes on your machine.
The extension at https://extensions.gnome.org/extension/5952/eval-gjs/ was not uploaded nor maintained by me. Please refrain from installing this extension at all.
Eval GJS GNOME Shell Extension
As of GNOME 41, the dbus method Eval()
is now restricted with MetaContext:unsafe-mode
property (see this commit). This extension provides unrestricted Eval()
dbus method for running arbitrary code in the compositor.
Features
- Run arbitrary GJS code like you would with GNOME
Eval()
dbus method. Main
,Gio
,GLib
andMeta
available by default.
Installation
git clone git://github.com/ramottamado/eval-gjs.git
cd eval-gjs
make install
Example Usage
gdbus call \
--session \
--dest org.gnome.Shell \
--object-path /dev/ramottamado/EvalGjs \
--method dev.ramottamado.EvalGjs.Eval "Main.overview.show();"