<div dir="ltr">attachments, in order:<br>(1) 0...the proposed patch to sugar<br>(2) suga..9.1 sugar part of a draft patch for 9.1, only read it if you're interested, scarcely tested.<br>(3) 0...s-l proposed patch for sugar-toolkit<br>
(4) tool...9.1 the sugar-toolkit part of the draft 9.1 patch<br>(5) 0...fixes some minor pylint cleanup to sugar, to be applied after patch 1 above.<br><br>So, the important parts here are (1) and (3). Patch (1) makes sugar registry service not add bundles unless they're in ~/Activities. (The registry can add such bundles, but the service will refuse to). Patch (3) makes activitybundle.py refuse to install loopholed activities unless called with securitycheck=False.<br>
</div>