As you may recall I expressed some reservations about the feature introduced in ant 1.2 whereby ant will search up the directory tree for a build.xml file
I recently asked my sysadmin to install ant 1.2 on our Unix system and, after reading the release notes, he sent me a colourful email, attached below. Dose anyone else, or their sysadmins, think this is a problem? Thoughts? Conor > It is not reasonable to assume a user has control of parent directories > as you move towards the root, so you get security issues (potentially), > performance issues (potentially, haven't these guys heard of NFS?) and > unexpected behaviour in multi level source trees (most probable - 95% > of confusion/complaints will come from there). > > I can't think of a good reason for it, if you really needed to run > higher level ant files you'd have ant -f ../../build.xml > > I've neve seen a piece of userland software (of its > own accord) investigate much past ".." or "../somedir". > > If they insisit on having it as a feature, it'd be quite useful to > > a. allow the sane to disable the feature with a command line > switch (an environment variable is probably too subtle) > > b. make sure we only ever used a patched version in the office > so it never bites us > -- Conor MacNeill [EMAIL PROTECTED] Cortex eBusiness http://www.cortexebusiness.com.au
