利用者:Julianeisel/Python Auto Run

Proposal: Running Python Scripts Security Warning

Motivation

Blender's ability to run Python scripts that have access to the entire system of the user is a possible security issue. So far, we've been trying to solve that by disabling Python file running per default and ask users if they want to reload the file with scripts enabled. There was also a User Preference option to always allow Python files to run. However, the notification for this is so small and misplaced, that most users just don't notice it or ignore it. A better solution is needed.

Forcing a User Decision

Usually, forcing the user to take an action is a no-go in Blender. This case is special though, since it's definitely a potential security issue. Thus, for this proposal we decided to accept forcing a user decision. More concrete, this means we'll block the user interface until the user made an explicit decision on how to handle Python script running.

---

Proposal by Ton Roosendaal, Pablo Vazquez and Julian Eisel.