[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pykde
Subject:    Re: Returning struct with Qt DBus?
From:       Florian Bruhin <me () the-compiler ! org>
Date:       2021-03-25 9:30:42
Message-ID: 20210325093042.paidpgzhvbnauvzm () aragog ! localdomain
[Download RAW message or body]


Hey Gottfried,

On Thu, Mar 25, 2021 at 06:55:49AM +0100, Gottfried Müller wrote:
> I made some experiments with DBus and Python three years ago. I encoded
> the message data. I used it to transfer a python dictionary.
> 
> [...]
>
> Maybe it is an answer and it works today too

I'm afraid this won't help in my case, as I'm trying to implement a
standardized API[1].

As an aside, let me note that pickle allows to run arbitrary code[2], so
anything with access to DBus can now run code in your application. This
might or might not be a security issue in practice.

Florian

[1] https://developer.gnome.org/notification-spec/
[2] https://nedbatchelder.com/blog/202006/pickles_nine_flaws.html

-- 
            me@the-compiler.org | https://www.qutebrowser.org 
       https://bruhin.software/ | https://github.com/sponsors/The-Compiler/
       GPG: 916E B0C8 FD55 A072 | https://the-compiler.org/pubkey.asc
             I love long mails! | https://email.is-not-s.ms/

["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]