@Xavier: thanks for the suggestions. I don't think system-stopping exceptions should be sent via RPC to the client, but using issubclass() might be more readable anyhow. As for altering 'exceptions', if an attacker had a way to do it, then he also has a way to directly execute arbitrary code, so this check does not help.
@Naresh: looks good, could you apply Xavier's suggestion with issubclass()? -- https://code.launchpad.net/~openerp-dev/openobject-client/trunk-bug-671926-nch/+merge/66747 Your team OpenERP sa GTK client R&D is requested to review the proposed merge of lp:~openerp-dev/openobject-client/trunk-bug-671926-nch into lp:openobject-client. _______________________________________________ Mailing list: https://launchpad.net/~openerp-dev-gtk Post to : [email protected] Unsubscribe : https://launchpad.net/~openerp-dev-gtk More help : https://help.launchpad.net/ListHelp
