Move to XML serialization

Bug #352437 reported by Michael Janelle-Montcalm
2
Affects Status Importance Assigned to Milestone
Tutorius
Fix Released
High
JC

Bug Description

Regarding the serialization of the tutorials, we decided to move the implementation from a pickle + headers format that we called TML to the more standard XML. Why?

- Security
Pickled objects can contain arbitrary code. We do not want to share executable code. We want to share elements of the data model. In this context, the XML format excanges only data and no executable code.

- Editability by hand
As devs, we are definitely tempted to go and edit bits and pieces of the tutorials right inside the file instead of going through the editor. Pickle does not allow edition as easily as XML does.

- Platform independance
Since XML is just text, it is strictly platform independent. This might not apply as well to pickle.

So this is why we would prefer a XML based file format instead of the binary pickle.

Changed in tutorius:
assignee: nobody → savard-jean-christophe
importance: Undecided → High
milestone: none → 0.2-first-public-demo
status: New → Confirmed
tags: added: core serializer
Revision history for this message
Simon Poirier (simpoir) wrote :

this was mostly done by JC and reviewed with some fixes and cleanup by me.
Trunk now includes stable version of the xml serializer

Changed in tutorius:
status: Confirmed → Fix Committed
Simon Poirier (simpoir)
Changed in tutorius:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.