-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/24/2011 08:28 AM, Cheetah wrote:
> The documentation clearly states that using an authority other than
> localhost is not permitted.

This was a deliberate decision when the feature was originally proposed.
The original spec was that the hostname would be completely ignored.  It
will be possible to change the spec in the future to be more lenient but
starting with it lenient and then tightening up could potentially break
existing code.

Anyone implementing an environment hosting SQLite (eg a web browser) would
need to be concerned about the URIs and host names.  Currently they can rest
assured that you can't trick SQLite.  This may be overly cautious but as
pointed out above it can be relaxed without harm.

> However, AFAICT, the standard form of a file:
> URI on windows for a UNC path uses exactly that.

Are you proposing that SQLite somehow work out if the supplied name maps
back to the local machine?  That would be mind numbingly hard!  (Netbios
names, DNS names, host files, etc)

Roger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk4FV78ACgkQmOOfHg372QTnjgCeOLAwfdoWO6zXiqgMo/N677J8
6cMAn3wZGv0nKQ/4+w5/8/+sz5rIdDWl
=FRCH
-----END PGP SIGNATURE-----
_______________________________________________
sqlite-users mailing list
sqlite-users@sqlite.org
http://sqlite.org:8080/cgi-bin/mailman/listinfo/sqlite-users

Reply via email to