On Fri, Oct 09, 2009 at 03:05:47PM -0700, David E. Wheeler wrote: > On Oct 9, 2009, at 10:52 AM, Graham Barr wrote: > >> I strongly agree that we should not be having perl code in the META >> file for >> security reasons. Although most people would use Safe to read it, >> there would be >> those that would not and could get caught out >> >> But the spec should also not be biased to a particular format, IMO. So >> describing >> what goes into the META data in terms of perl data types seems >> reasonable. >> >> The spec should contain a separate section which describes how the >> data is serialized > > +1
+1 from me too :) Cheers, Barbie. -- Birmingham Perl Mongers <http://birmingham.pm.org> Memoirs Of A Roadie <http://barbie.missbarbell.co.uk> CPAN Testers Blog <http://blog.cpantesters.org> YAPC Conference Surveys <http://yapc-surveys.org>
