Finally someone has brought this problem to the forefront. I have been assuming for years that thinking about this problem was just my paranoia. And I don't understand why they don't just fix it. In my mind, the solution is simple:
1) Add a line "#!/usr/bin/desktop-icon-parser-program" to the beginning of every.desktop file
2) Require the execution bit.
This would also solve the problem that.desktop files cannot be executed from the terminal, making them useless for those that mainly use the terminal, but occasionally use the desktop (old school style). If the two changes above are made, then you simply execute ~/Desktop/mylauncher.desktop to run the launcher.
Slashdot Mirror
Finally someone has brought this problem to the forefront. I have been assuming for years that thinking about this problem was just my paranoia. And I don't understand why they don't just fix it. In my mind, the solution is simple: 1) Add a line "#!/usr/bin/desktop-icon-parser-program" to the beginning of every .desktop file
2) Require the execution bit.
This would also solve the problem that .desktop files cannot be executed from the terminal, making them useless for those that mainly use the terminal, but occasionally use the desktop (old school style). If the two changes above are made, then you simply execute ~/Desktop/mylauncher.desktop to run the launcher.