[prev in list] [next in list] [prev in thread] [next in thread] 

List:       koffice-devel
Subject:    Re: Linux Format: KSpread "disaster area"
From:       Robert Knight <robertknight () gmail ! com>
Date:       2006-01-16 1:07:04
Message-ID: 13ed09c00601151707p34cfd1a6k () mail ! gmail ! com
[Download RAW message or body]

> Javas security model is actually better then all the other languages I
> know, so if there is _any_ scripting to be had, I'd love to have Java
> instead.
> Note that I'd naturally go for one of the GPL-ed Classpath JVMs :)

Agreed, but security does need a serious discussion before it is
extended to KSpread / KWord.  We all know what happens when it gets
tacked on as an afterthought.

In particular, I suggest that just giving the user a "This file
contains scripts which may be dangerous, do you want to execute them?"
prompt when a document is opened is a poor solution.  It assumes that
the user will actually read and take the dialog seriously, and also
that they have enough information to make an informed decision about
whether or not to run the scripts.


On 16/01/06, Cyrille Berger <cberger@cberger.net> wrote:
> > Javas security model is actually better then all the other languages I
> > know, so if there is _any_ scripting to be had, I'd love to have Java
> > instead.
> > Note that I'd naturally go for one of the GPL-ed Classpath JVMs :)
> sure we wait to see what trolltech with do for their Qt4 binding for java.
> --
> --- Cyrille Berger ---
> _______________________________________________
> koffice-devel mailing list
> koffice-devel@kde.org
> https://mail.kde.org/mailman/listinfo/koffice-devel
>
_______________________________________________
koffice-devel mailing list
koffice-devel@kde.org
https://mail.kde.org/mailman/listinfo/koffice-devel
[prev in list] [next in list] [prev in thread] [next in thread]