[insecurity] don't auto-update when I click "later"
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 3.5k
- Forks
- 409
- PR merge metrics
- No merged PRs in 30d
Description
first off, I'm using the appimage build for a reason, and expect the old version to remain whenever the update is downloaded.
the app has NO right to breach my PC security and replace the current version with the declined upgrade.
(this is exactly what makes electron a malware tunnel, since it's a public space app framework any hacker can take control of to destroy any target they want)
add to that it's broken anyways #3540
so that's all the more reason I should have to manually download the update, like every other appimage I use.
but most importantly, when I decline the update, that doesn't mean "go through with the update"
I expect to manually download the updated appimage I need from the releases page here.
automating this process is an insecurity.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the Electron AppImage update flow and issue #3540 first, then reproduce the behavior by choosing “Later” in the update prompt. Done means declining the update leaves the current AppImage installed and requires the user to download a newer AppImage manually from the releases page.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- electron, javascript
- Domain
- desktop
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100