306734 - Need to implement installation of Dashboard Widgets similar to Safari

Status: VERIFIED WONTFIX

(Camino Graveyard :: Downloading, enhancement)

Description

[Nick Kreeger]

When downloading a dashboard widget in safari, (as of 10.4.2) a installation
notification pops up and promts the user if it is ok to install the widget. If
the user chooses to do so, the widget is automatically unpacked and then moved
to the ~/Library/Widgets folder. After that, Dashboard is launched and and
places the widget onto the screen.

We should really implement this feature, as to the average user, they have no
idea where a widget sits in the directory. Adding this will make more Tiger
users who are dashboard crack-heads hopefully use Camino more.

Comment 1

[Samuel Sidler (old account; do not CC)]

Not a 1.0 thing, but if it's done by then, great.

A couple questions:

1) Is this something we "really" want? Are there any security issues involved
with implementing this? Are we going to have an option in the prefs to turn this
off?

2) Will it be easy to implement this *only* on Tiger? Jaguar/Panther users
shouldn't see this dialog at all since there's nothing they can do with the widgets.

Comment 2

[Ulrik Sverdrup]

There is no reason for us to code this feature, no reason for us to try to
integrate apple's latest features from Safari into Camino.

What we could do, and what would make more sense would be to implement more
general (and configurable) after-processing to downloaded files. Example to help
the widgets issue: we could let camino not only open the downloaded files, but
also open the resulting files after extraction from a compressed archive.
Optimally, this would be configured both by type and by source (won't ever
happen, I know).

If this is a widget issue entirely to you, I vote wontfix.

Comment 3

[Wevah (Nate Weaver)]

-> enhancement

Though I'm not convinced that we really *need* this.

Comment 4

[froodian (Ian Leue)]

We talked about this a bit in channel, and the opinions seemed split between feeling that this is a logical extension of the "Open Downloaded Files" pref, and feeling that this is overstepping the scope of a browser.  

Personally, I'm of the second opinion.  Just because I downloaded a widget doesn't necessarily mean I instantly want it to be installed, and if I ever do want that, I can just double-click it.  Are we going to start sniffing .app files and copying them automatically into /Applications/ next?  To me they seem like the same behavior.

Comment 5

[Smokey Ardisson (offline for a while; not following bugs - do not email)]

I think it's very dangerous for us to start auto-installing things that are not inherently safe (and have past security exploits), like widgets.  I don't think we should start exposing our users to security holes like this, when we won't (and can't) respond quickly in the face of problems.

Safari's doing behavior like this has continually caused egg-on-their face, and the OS has a way of installing them "manually" (double-click) that is safer for the user.

I think this is WONTFIX, but Future per triage.

Comment 6

[Stuart Morgan]

Since opening a widget installs it, this would essentially come down to auto-opening one specific type regardless of the pref, which seems like it's pretty clearly not something we want to do based on the discussion above. WONTFIX.