--- On Mon, 8/11/08, Emmanuele Bassi <[EMAIL PROTECTED]> wrote:
> On Mon, 2008-08-11 at 14:48 -0700, Noah Gibbs wrote:
> > We're looking at a situation where we might get
> data that is more free-form.
>
> I hope you do realize the potential security issues that
> this would
> entail.
I responded to you in private email about this, and mentioned that I knew
some of these issues -- we'll need to be careful about what GObjects we allow
to be instantiated, primarily. We're in a situation where we both write the
ClutterScript files at my company, and have the ability to vet what "type"
fields are allowed, so I believe that we're reasonably safe on this one. I'm
hoping that if you disagree you'll let me know.
> I can add a method like:
>
> gchar **clutter_script_get_ids (ClutterScript *script,
> gsize *n_ids);
>
> which returns a newly allocated, NULL-terminated array of
> strings.
>
> but the ids alone will not give you any detail whatsoever
> on the object
> they are assigned to; you'll have to fetch the object
> and then check
> what it is.
This is true. So it might be more useful to get an array of GObject pointers
instead of an array of IDs. I'd be quite happy either way since either would
allow me to do what I'm trying to.
--
To unsubscribe send a mail to [EMAIL PROTECTED]