Gnome 3 (under GNU/Linux, BSD or other Un*x) now offers a gnome shell with nice presentation, but where the configuration and theming are to be done via a web browser (and a public URL, on a public server).
I know that having two questions for one is not welcome there, but the link between the questions is strong.
Here are my questions:
Could this feature become a security issue?
If yes, how could I manage access (even block) this?
For example allowing or disallowing JavaScript in the browser; I would be able to allow or not JavaScript access to dbus, maybe with some limitations, like on IP or a ssl-certs list...