configparser v/s file variables

Jim Lee jlee54 at gmail.com
Thu Jun 28 20:38:13 EDT 2018



On 06/28/18 16:44, Steven D'Aprano wrote:
>
>> I agree with you that it's a bad idea.
> Aside from the little fact that you described concerns about using Python
> code for settings as "silly".
>

Umm, no.  I said that worrying about arbitrary code execution in an 
interpreted language seemed silly.  Please be more accurate in your 
paraphrases.

>
> Data validation is a red herring: it is no more or less necessary to
> validate user settings regardless of their source. Whether they come from
> reading an INI file or from importing a Python file, you still need to
> check that they have valid values.
>
>
You are making a strawman argument, since you are (again) 
misrepresenting what I said.  Therefore, I will give you no more 
opportunities.

-Jim




More information about the Python-list mailing list