AppMover Swift Library
Oskar Groth published a modern iteration of the “LetsMove” framework where you can show a dialog at app launch, asking the user if she wants to move the app to /Applications first.
LetsMove uses AuthorizationExecuteWithPrivileges, which has long been deprecated but doesn’t have a good replacement.
AppMover uses NSAppleScript, without escaping the paths in the generated AppleScript string, to invoke rm
and cp
via do shell script […] with administrator privileges
.
Neither works with sandboxed apps.
2 Comments RSS · Twitter
“without escaping the paths in the generated AppleScript string”
“also does invoke rm and cp instead of /bin/rm and /bin/cp”
This is to say, giant honking security/safety holes. The appalling levels of incompetence in this awful industry never ceases to amaze.
It also does invoke rm and cp instead of /bin/rm and /bin/cp.
Which is strange considering other parts of the code correctly use the absolute paths.