----- Original Message ----- From: "Ulrich B. Staudinger" <[EMAIL PROTECTED]>i guess i should get familiar with all those sayings ... tongue in cheek? now what's this, where should i put my tongue? :-)
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 25, 2003 2:05 PM
Subject: Re: [JDEV] Re: jabber; what would you like to see?
Richard Dobson wrote:is a
Sorry but to me anyone doing something like this should be shot, havingWhat I picture is that one could have a scripting languague within the packets, for example:
<iq type="get"> <query xmlns="bla bla"> <script> @users=fetchroster(1,2,3); for ($i=0; $i<[EMAIL PROTECTED]) { echo "<message [EMAIL PROTECTED]> In my new roster bla bla "; } createrostergroup(@users, "newrostergroup"); return @users; </script> </query> </iq>
scripting send inside packets to be processed by the endpoint like this
somesecurity hole of an enormous magnetude, and we definately should not be
doing anything like this. This is kind of like word macros, it can have
sortsbenefits but the potential for abuse is massive, it would require all
thingof extra security stuff to even attempt to secure it. Overall I think the
downsides are far more than the benefit of the convenience, the best
setis to continue doing what we have been doing and creating protocols for
alreadypurposes. We don't need the flexibility of a scripting system as we
Maybe not shot - only dipped into cold coffee for more than an hour ...have the flexibility/extensibility of XML and the jabber protocol to do things like this without creating massive security holes.
+1 - absolutely not supportable from my side.
Yea sorry, "... should be shot" is a common saying over here in the UK meaning that something someone has done is very bad/silly, its a tongue in cheek thing.
np
ulrich
Richard
_______________________________________________ jdev mailing list [EMAIL PROTECTED] http://mailman.jabber.org/listinfo/jdev
-- Ulrich B. Staudinger http://www.die-horde.de email: [EMAIL PROTECTED] jid: [EMAIL PROTECTED]
current project: REDHORN http://redhorn.sourceforge.net
Blog: http://jabber.linux.it/jogger/[EMAIL PROTECTED]
_______________________________________________ jdev mailing list [EMAIL PROTECTED] http://mailman.jabber.org/listinfo/jdev