A RetroSearch Logo

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Search Query:

Showing content from http://mail.python.org/pipermail/python-dev/2002-February/020328.html below:

[Python-Dev] PEP 215 redux: toward a simplified consensus?

[Python-Dev] PEP 215 redux: toward a simplified consensus? [Python-Dev] PEP 215 redux: toward a simplified consensus?Paul Prescod paul@prescod.net
Mon, 25 Feb 2002 15:12:31 -0800
"Fred L. Drake, Jr." wrote:
> 
>...
> 
> Yes, but I'm not convinced this has any more security implications
> implications than using a library function to perform the
> transformation.

The point is that the simplest mechanism, that we teach to newbies, has
security non-obvious "concerns". If we have literal interpolation, then
a library function would be used by people who WANT to do it at runtime
because they have a REASON for doing it at runtime and thus have a
pretty clear concept of the distinction between runtime and compile
time.

But as I've said, the major reason for this is not security. I don't
know that a Python program has been hacked through "%" so it doesn't
make sense to lose sleep over it. The major reason for doing it at
compile time (for me) is that you can have a nice syntax that doesn't
evolve modulus-ing (or dividing) an otherwise useless vars() or locals()
dictionary.

 Paul Prescod



RetroSearch is an open source project built by @garambo | Open a GitHub Issue

Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo

HTML: 3.2 | Encoding: UTF-8 | Version: 0.7.4