Re: [Development] Qt 5.9's new garbage collector documentation? + root_ptr

2017-07-08 Thread Phil Bouchard
On 07/08/2017 12:42 AM, Phil Bouchard wrote: On 07/07/2017 10:14 PM, Phil Bouchard wrote: But if I can do a deep copy then I can certainly "re-set" the variable (change the set the variable is owned by). If I can do that then we won't need any deep copy. I just need to think a little bit...

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread Massimo Callegari via Development
@André > Like a text editor that is used to edit /etc/passwd or /etc/group will > "filter" malicious intentions when saving the file? How you edit the files is irrelevant. /etc/passwd is interpreted by openssl. That is relevant. You clearly didn't get the point. > And if I 'edit' /bin/ls to

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread Konstantin Tokarev
08.07.2017, 21:01, "Massimo Callegari via Development" : > On Sat, Jul 08, 2017 at 11:24:56AM +, Massimo Callegari via Development > wrote: > >>>  2) Security ? There is none. If you deploy an application using a >>> TextField control with >>>  echoMode:

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread André Pönitz
On Sat, Jul 08, 2017 at 06:00:23PM +, Massimo Callegari wrote: > > > On Sat, Jul 08, 2017 at 11:24:56AM +, Massimo Callegari via Development > wrote: > > >> 2) Security ? There is none. If you deploy an application using a > >> TextField control with > >> echoMode:

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread Massimo Callegari via Development
On Sat, Jul 08, 2017 at 11:24:56AM +, Massimo Callegari via Development wrote: >> 2) Security ? There is none. If you deploy an application using a TextField >> control with >> echoMode: TextInput.Password, one can easily add some trivial JavaScript >> code to the >> comfortably

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread André Pönitz
On Sat, Jul 08, 2017 at 11:24:56AM +, Massimo Callegari via Development wrote: > 2) Security ? There is none. If you deploy an application using a TextField > control with > echoMode: TextInput.Password, one can easily add some trivial JavaScript code > to the > comfortably reachable

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread André Pönitz
On Sat, Jul 08, 2017 at 01:33:54PM +, Massimo Callegari via Development wrote: > > * Security is a big topic, but for files you use the filesystem user/group > > permissions > > As far as I know, there's no such thing in Windows when you install an > application at user > level. I use NSIS

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread Massimo Callegari via Development
> * I think that Universal and material styles are bundled because the user can > change the current style used from the command line I know that, but it should be up to the developer to pick what goes in the bundle, not a tool. In my case, I use Quick Controls 2 just as templates and I

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread Filippo Cucchetto
* I think that Universal and material styles are bundled because the user can change the current style used from the command line * For the QtNetwork stuff you need to keep in mind that a lost of stuff works with URLs. For example you can specify and "http://..; url for an Image source. If i'm not

Re: [Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread Christoph Feck
On 08.07.2017 13:24, Massimo Callegari via Development wrote: 2) Security ? There is none. If you deploy an application using a TextField control with echoMode: TextInput.Password, one can easily add some trivial JavaScript code to the comfortably reachable QtQuick/Controls.2/TextField.qml

[Development] How is Quick Controls 2 deployment meant to be ?

2017-07-08 Thread Massimo Callegari via Development
Hello Qt devs, the Quick Controls 2 initiative is great, but I'm struggling to understand how deployment is meant to be done. So for "fun" I did an experiment on Windows (but this is the same also on other platforms): - open Qt Creator - create a new Quick Controls 2 default template (1 text

Re: [Development] Qt 5.9's new garbage collector documentation? + root_ptr

2017-07-08 Thread Tim Blechmann
> - the parameters of the function will remain unaffected if they are used as > r-values > - the parameters of the function will require a deep copy of the expression > if they are used as l-values https://en.wikipedia.org/wiki/Evaluation_strategy#Call_by_sharing function foo( arg ) { var

Re: [Development] WA_MacBrushedMetal

2017-07-08 Thread René J . V . Bertin
On Friday July 07 2017 20:55:34 Gabriel de Dietrich wrote: Hi Gabriel, >QMacStyle is no longer using this attribute in 5.10. See >https://codereview.qt-project.org/194383. >We can’t remove it until Qt 6, but it should be documented as deprecated and >effectively useless. That's more or less