On Fri, 2009-02-06 at 09:40 +0100, David Waern wrote:
> 2009/2/6 Max Rabkin <[email protected]>:
> > On Thu, Feb 5, 2009 at 4:25 PM, David Waern <[email protected]> wrote:
> >> As for running arbitrary commands, I think we are opening up to a lot
> >> of unfamiliar syntax. I'd like to hear what everyone thinks about
> >> that.
> >
> > I personally find it useful to have Haddock comments readable in the source.
> >
> > And aren't there security issues, too? So we'd have to have an option
> > to disable them, which would have to be on by default, and basically
> > they would be disabled by everybody but the writers of the comments
> > themselves.

> I think you can invoke any command using Setup.hs and Cabal already.

It's not a question of what's possible.  It's a question of how hard it
is to audit your code.  Do I just have to read your build system
(Setup.hs and its import tree, and maybe the Cabal file)?  Or do I have
to scan the source code for dubious constructs (unfortunately, we
already have this issue with Template Haskell)?  Most programs have
source code that is much larger than their build systems.

jcc


_______________________________________________
Haskell-Cafe mailing list
[email protected]
http://www.haskell.org/mailman/listinfo/haskell-cafe

Reply via email to