From 7a02fcc5d109d2d06bb115f93811424bd88343aa Mon Sep 17 00:00:00 2001
From: Gabriele Musco <gabmus@disroot.org>
Date: Tue, 8 Apr 2025 15:38:20 +0200
Subject: [PATCH] fix: disable and blacklist wayvr dashboard plugin

---
 src/ui/app.rs         | 4 ++++
 src/ui/plugins/mod.rs | 4 ++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/src/ui/app.rs b/src/ui/app.rs
index 9910d2d..7354cdc 100644
--- a/src/ui/app.rs
+++ b/src/ui/app.rs
@@ -249,6 +249,10 @@ impl App {
             .plugins
             .values()
             .filter_map(|cp| {
+                // disable potentially unsafe wayvr_dashboard
+                if cp.plugin.appid.contains("wayvr_dashboard") {
+                    return None;
+                }
                 if cp.enabled && cp.plugin.validate() {
                     if let Err(e) = cp.plugin.mark_as_executable() {
                         error!(
diff --git a/src/ui/plugins/mod.rs b/src/ui/plugins/mod.rs
index 8d2d792..7dcabd1 100644
--- a/src/ui/plugins/mod.rs
+++ b/src/ui/plugins/mod.rs
@@ -163,10 +163,10 @@ impl Plugin {
 
 /// urls to manifest json files representing plugins.
 /// each manifest should be json and the link should always point to the latest version
-const MANIFESTS: [&str;3] = [
+const MANIFESTS: [&str;2] = [
     "https://github.com/galister/wlx-overlay-s/raw/refs/heads/meta/com.github.galister.wlx-overlay-s.json",
-    "https://github.com/olekolek1000/wayvr-dashboard/raw/refs/heads/meta/dev.oo8.wayvr_dashboard.json",
     "https://github.com/StardustXR/telescope/raw/refs/heads/main/envision/org.stardustxr.telescope.json",
+    // wayvr dashboard potentially unsafe
 ];
 
 pub async fn refresh_plugins() -> anyhow::Result<Vec<anyhow::Result<Plugin>>> {