TEMP: Only allow internal extensions (Pico/WeDo)

scratchfoundation · Aug 18, 2014 · a4170a6 · a4170a6
1 parent adf75db
commit a4170a6
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/extensions/ExtensionManager.as b/src/extensions/ExtensionManager.as
@@ -94,7 +94,8 @@ public class ExtensionManager {
 		if (ext && ext.showBlocks != flag) {
 			ext.showBlocks = flag;
 			if(app.jsEnabled && ext.javascriptURL) {
-				if(flag) {
+				// TEMPORARY HOTFIX: Only allow activation of internal extensions while we figure out what to do about an apparent extension security problem.
+				if(flag && ext.isInternal) {
 					var javascriptURL:String = ext.isInternal ? Scratch.app.fixExtensionURL(ext.javascriptURL) : ext.javascriptURL;
 					app.externalCall('ScratchExtensions.loadExternalJS', null, javascriptURL);
 					ext.showBlocks = false; // Wait for it to load