On 06/28/18 16:44, Steven D'Aprano wrote:
I agree with you that it's a bad idea.
Aside from the little fact that you described concerns about using Python
code for settings as "silly".
Umm, no. I said that worrying about arbitrary code execution in an
interpreted language seemed silly. Please be more accurate in your
paraphrases.
Data validation is a red herring: it is no more or less necessary to
validate user settings regardless of their source. Whether they come from
reading an INI file or from importing a Python file, you still need to
check that they have valid values.
You are making a strawman argument, since you are (again)
misrepresenting what I said. Therefore, I will give you no more
opportunities.
-Jim
--
https://mail.python.org/mailman/listinfo/python-list
