On Oct 9, 2009, at 10:52 AM, Graham Barr wrote:

I strongly agree that we should not be having perl code in the META file for security reasons. Although most people would use Safe to read it, there would be
those that would not and could get caught out

But the spec should also not be biased to a particular format, IMO. So describing what goes into the META data in terms of perl data types seems reasonable.

The spec should contain a separate section which describes how the data is serialized

+1

David

Reply via email to