Objective-C Plugin Architecture Security (Mac, not iPhone)
问题 I'm possibly writing a plugin system for a Cocoa application (Mac, not iPhone). A common approach is the make each plugin a bundle, then inject the bundle into the main application. I'm concerned with the security implications of doing this, as the bundle will have complete access to the Objective-C runtime. I am especially concerned with a plugin having access to the code that handles registration and serial keys. Another plugin system we are considering is based on distributed notifications