|
From: Michael F. <fuz...@vo...> - 2009-05-21 21:51:27
|
Ken Kuhlman wrote: > > On Wed, May 20, 2009 at 1:40 PM, Ken Kuhlman <ksk...@gm... > <mailto:ksk...@gm...>> wrote: > > > On Sat, May 16, 2009 at 6:47 AM, Michael Foord > <fuz...@vo... <mailto:fuz...@vo...>> wrote: > > Hello Ken, > > I'll look at this. A problem with eval is that it is unsafe > (arbitrary > code execution) - which is one reason to use a text based config > system in the first place. > > Michael > > -- > http://www.ironpythoninaction.com > > > Thanks Michael. After doing some more digging around it looks > like this is as much a Python 3 issue as anything, and that the > ast module is the preferred long-term solution. > > I think I'll break jython support (ignoring unrepr) out into it's > own ticket, and create another for using ast when compiler isn't > available. The differences between the APIs is giving me fits, > though, so I'm not going to make any promises that the latter will > come with a working patch. > > > I got the ast-based Builder fully working. I ended up combining the > patches after all, though, since there was some overlap in the imports. > > Ticket #3 on google code. Cool - great. I'll look at the best way of integrating this. ConfigObj will need something of a rewrite for Python 3 anyway as the unicode handling will be different (although not massively different come to think of it). No-one has asked me for a Python 3 version yet anyway. :-) Many thanks, Michael > > Thanks, > -Ken > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------------ > Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT > is a gathering of tech-side developers & brand creativity professionals. Meet > the minds behind Google Creative Lab, Visual Complexity, Processing, & > iPhoneDevCamp asthey present alongside digital heavyweights like Barbarian > Group, R/GA, & Big Spaceship. http://www.creativitycat.com > ------------------------------------------------------------------------ > > _______________________________________________ > Configobj-develop mailing list > Con...@li... > https://lists.sourceforge.net/lists/listinfo/configobj-develop > -- http://www.ironpythoninaction.com/ http://www.voidspace.org.uk/blog |