Skip to content

Conversation

@Ushie
Copy link
Member

@Ushie Ushie commented Feb 12, 2025

Closes #2061

image
image

@Ushie Ushie marked this pull request as draft February 12, 2025 12:47
@github-actions

This comment was marked as off-topic.

@validcube

This comment was marked as off-topic.

@Ushie Ushie marked this pull request as ready for review March 5, 2025 15:43
@validcube validcube linked an issue Mar 8, 2025 that may be closed by this pull request
3 tasks
@Ushie Ushie requested a review from Axelen123 May 4, 2025 22:41
@oSumAtrIX
Copy link
Member

Offtopic, but why does it say "ReVanced Manager: ..."?

@oSumAtrIX
Copy link
Member

I think the importance of this screen and dialog is enabling and disabling plugins. Trusting them is a secondary task to achieve that main objective. Strings can be renamed to say "Enable" or "Disable" plugin. And the dialog can mention that enabling the plugin can run arbitrary code and need to be trusted as a "side notice"

<string name="downloader_plugin_trust_dialog_title">Trust plugin?</string>
<string name="downloader_plugin_revoke_trust_dialog_title">Revoke trust?</string>
<string name="downloader_plugin_trust_dialog_body">Package name: %1$s\nSignature (SHA-256): %2$s</string>
<string name="downloader_plugin_trust_dialog_body">By continuing you\'ve agreed to running external plugins.\n\nDo not allow any suspicious plugin(s) to be installed as they can run arbitrary code.</string>
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sounds like youre signing some legal document. Probably different wording would be better here.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also, "plugin(s)" can just be "plugins".

@Ushie
Copy link
Member Author

Ushie commented May 5, 2025

Offtopic, but why does it say "ReVanced Manager: ..."?

Placeholder representation of the app name

@oSumAtrIX
Copy link
Member

I am not sure what you mean by placeholder. What would be written there if others develop plugins?

@Ushie
Copy link
Member Author

Ushie commented May 5, 2025

The app name of the plugin — for example, the APKMirror plugin would be named ReVanced Manager: APKMirror. This accurately represents what the app is and its purpose. If it were just APKMirror, you wouldn't know it is for ReVanced Manager in the app list, and that it isn't actually by APKMirror.

@oSumAtrIX
Copy link
Member

It should probably say "ReVanced: APKMirror downloader" or "Ushie: Some other downloader"

@Ushie
Copy link
Member Author

Ushie commented May 5, 2025

Would Ushie make sense here? It serves no purpose knowing who the developer is, knowing what app it's for is what makes more sense

CnC-Robert and others added 13 commits May 20, 2025 13:59
* feat: store patched apps

* fix: missing string

* feat: save patch selection

* feat: things

* fix: fix broken query

* fix: remove redundant `withContext`

* fix: fix
This bump `actions/upload-artifact`@v2 to `actions/upload-artifact`@v3
The repository was moved from `revanced-manager-compose` to the main one, which is `revanced-manager`.

The organisation's name has also switched to `ReVanced` (used to be `revanced`).
Add paths-ignore to all markdown files, and .idea folder
Show appreciation message for new contributors
@oSumAtrIX oSumAtrIX force-pushed the compose-dev branch 2 times, most recently from 2b380b0 to dd48011 Compare May 20, 2025 12:28
@brosssh brosssh force-pushed the compose/feat/improve-trust-plugin-dialog branch from ba1271b to 47129cd Compare May 30, 2025 10:10
@brosssh brosssh requested a review from Axelen123 May 30, 2025 10:12
@brosssh brosssh requested a review from oSumAtrIX May 31, 2025 12:38
@brosssh
Copy link
Member

brosssh commented Jul 7, 2025

Can this be merged?

@Axelen123
Copy link
Member

If the designers are ok with it then yes

@Ushie
Copy link
Member Author

Ushie commented Jul 7, 2025

What do you think about this?

#2420 (comment)

@Ushie Ushie changed the base branch from compose-dev to dev October 3, 2025 13:17
@KobeW50
Copy link
Contributor

KobeW50 commented Nov 6, 2025

I think the importance of this screen and dialog is enabling and disabling plugins. Trusting them is a secondary task to achieve that main objective. Strings can be renamed to say "Enable" or "Disable" plugin. And the dialog can mention that enabling the plugin can run arbitrary code and need to be trusted as a "side notice"

I agree. In addition to changing the button to "Enable"/"Disable", I think the other button should be "Cancel" instead of "Dismiss". "Cancel" is already used in other similar dialogs (see the Advanced section in the settings).

A new issue is that when using the words "Enable"/"Disable", there is no longer any purpose for the dialog when disabling it. Disabling a plugin inherently means that it will no longer function or run its code. Therefore, I think it would be fitting for the plugins to have a toggle, and the dialog would only appear when the toggle is being enabled.

Here is a proposal for the dialog when enabling a plugin:

Enabling this plugin will allow it to run arbitrary code. Only enable this plugin if you trust it.

If the goal is to sound somewhat scary, "run arbitrary code" can be substituted with "execute arbitrary code".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat: Improve trust plugin dialog design