configparser v/s file variables
Jim Lee
jlee54 at gmail.com
Thu Jun 28 20:38:13 EDT 2018
On 06/28/18 16:44, Steven D'Aprano wrote:
>
>> I agree with you that it's a bad idea.
> Aside from the little fact that you described concerns about using Python
> code for settings as "silly".
>
Umm, no. I said that worrying about arbitrary code execution in an
interpreted language seemed silly. Please be more accurate in your
paraphrases.
>
> Data validation is a red herring: it is no more or less necessary to
> validate user settings regardless of their source. Whether they come from
> reading an INI file or from importing a Python file, you still need to
> check that they have valid values.
>
>
You are making a strawman argument, since you are (again)
misrepresenting what I said. Therefore, I will give you no more
opportunities.
-Jim
More information about the Python-list
mailing list