Re: platform specific imports and import security

2013-09-19 Thread Kevin Krammer
On Thursday, 2013-09-19, Marco Martin wrote: > On Thursday 19 September 2013, Kevin Krammer wrote: > > On Wednesday, 2013-09-18, Marco Martin wrote: > > > * platform specific content * > > > > > > ** for all files in the package, all urls are rewritten by resolving > > > them with package.filePath

Re: platform specific imports and import security

2013-09-19 Thread Marco Martin
On Thursday 19 September 2013, Kevin Krammer wrote: > On Wednesday, 2013-09-18, Marco Martin wrote: > > * platform specific content * > > > > ** for all files in the package, all urls are rewritten by resolving them > > with package.filePath, with all the file resolution magic given by > > PLASMA_

Re: platform specific imports and import security

2013-09-19 Thread Kevin Krammer
On Wednesday, 2013-09-18, Marco Martin wrote: > * platform specific content * > > ** for all files in the package, all urls are rewritten by resolving them > with package.filePath, with all the file resolution magic given by > PLASMA_PLATFORM env var. > This was very limited in plasma1, now every

Re: platform specific imports and import security

2013-09-19 Thread Marco Martin
On Thursday 19 September 2013, Aaron J. Seigo wrote: > this means having a registry of permissions somewhere and a way to manage > those permissions. colour me excited, though, as this fills in a large > remaining gap. and maybe nicely integrating with package signing.. ;) > > con: a QQmlAbstract

Re: platform specific imports and import security

2013-09-19 Thread Aaron J. Seigo
On Wednesday, September 18, 2013 17:21:29 Marco Martin wrote: > * security * > ** forbid access to absolute paths that are ouside both the applet package > and the import paths (implemented) this means having a registry of permissions somewhere and a way to manage those permissions. colour me exc

platform specific imports and import security

2013-09-18 Thread Marco Martin
Good news everyone! http://www.youtube.com/watch?v=1D1cap6yETA I am playing with the new api QQmlAbstractUrlInterceptor (to completely work will need https://codereview.qt-project.org/#change,65626 and https://codereview.qt-project.org/#change,61208) the thing will permit to do a kind of mod_rewr