[Issue]: Whitelisted assemblies not included from manifest #4935

Closed
opened 2026-02-07 01:18:20 +03:00 by OVERLORD · 1 comment
Owner

Originally created by @AmbulantRex on GitHub (Jul 1, 2023).

Please describe your bug

A whitelist of assemblies may be added to a plugin to prevent loading DLLs that may contain native interop. This relates to discussion #9523 and the changes were applied in PR #9564.

It appears that this is due to the reconciliation of the local manifest against the installation manifest. When the reconciliation occurs, only the local manifest is considered which contains an empty array by default and so the installation manifest is clobbered immediately.

Steps to reproduce:

  1. Install a plugin from a manifest where the version contains an assemblies array.
  2. Access the meta.json in the plugin folder to see that the assemblies array is empty after install.

Jellyfin Version

10.8.z

if other:

No response

Environment

Any

Jellyfin logs

No response

FFmpeg logs

No response

Please attach any browser or client logs here

No response

Please attach any screenshots here

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct
Originally created by @AmbulantRex on GitHub (Jul 1, 2023). ### Please describe your bug A whitelist of assemblies may be added to a plugin to prevent loading DLLs that may contain native interop. This relates to discussion #9523 and the changes were applied in PR #9564. It appears that this is due to the reconciliation of the local manifest against the installation manifest. When the reconciliation occurs, only the local manifest is considered which contains an empty array by default and so the installation manifest is clobbered immediately. Steps to reproduce: 1. Install a plugin from a manifest where the version contains an assemblies array. 2. Access the `meta.json` in the plugin folder to see that the assemblies array is empty after install. ### Jellyfin Version 10.8.z ### if other: _No response_ ### Environment ```markdown Any ``` ### Jellyfin logs _No response_ ### FFmpeg logs _No response_ ### Please attach any browser or client logs here _No response_ ### Please attach any screenshots here _No response_ ### Code of Conduct - [X] I agree to follow this project's Code of Conduct
OVERLORD added the bug label 2026-02-07 01:18:20 +03:00
Author
Owner

@AmbulantRex commented on GitHub (Jul 16, 2023):

Based on our previous discussions, I think we concluded that the meta.json should be included with necessary assemblies and NOT supplied via the version information. This is probably fine, but it feels a bit un-intuitive.

@AmbulantRex commented on GitHub (Jul 16, 2023): Based on our previous discussions, I think we concluded that the `meta.json` should be included with necessary assemblies and NOT supplied via the version information. This is probably fine, but it feels a bit un-intuitive.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/jellyfin#4935