[Python-ideas] pytaint: taint tracking in python

Nick Coghlan ncoghlan at gmail.com
Wed Oct 16 00:02:26 CEST 2013


On 16 Oct 2013 07:15, "Ned Batchelder" <ned at nedbatchelder.com> wrote:
>
> On 10/14/13 8:25 AM, Felix Gröbert wrote:
>>
>> The idea itself is not new (Ruby and Perl have it; there are also some
python libraries floating around) and pretty much noone uses it - however
with a few improvements, it can be made viable.
>
>
> I'd be interested to hear why this feature isn't used in the languages
that already have it.  That seems to be a strike against it.  Your proposed
changes sound like they make it a more complex feature, and therefore less
likely to be used.

At least the Perl one is a bit too simplistic for sophisticated cases, as
it just divides the world into safe and unsafe strings.

That approach is closer to the safe/unsafe marking mechanisms that Python
web frameworks already tend to use for templating and other aspects of
response generation.

Cheers,
Nick.

>
> --Ned.
>
> _______________________________________________
> Python-ideas mailing list
> Python-ideas at python.org
> https://mail.python.org/mailman/listinfo/python-ideas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-ideas/attachments/20131016/79435513/attachment.html>


More information about the Python-ideas mailing list