Hi
On Tue, Jan 8, 2019 at 4:24 PM Christophe Fergeau <cfergeau@xxxxxxxxxx> wrote:
>
> On Wed, Dec 19, 2018 at 06:33:59PM +0400, marcandre.lureau@xxxxxxxxxx wrote:
> > +URI Parameters
> > +--------------
> > +
> > +A description of host information and URI parameters is provided in
> > +this section. Information on the constraints of various data types is
> > +provided in Section "Data Types". All parameters are considered optional;
> > +however, a client will not be able to connect without sufficient
> > +information.
> > +
> > +A parameter without a specified default value indicates that no
> > +default value is implied by this URI scheme; however, Spice clients
> > +can apply implementation-dependent default behaviors otherwise
> > +consistent with this document.
> > +
> > +The <userinfo> value is deprecated and processed only in an
> > +implementation-specific manner. The <userinfo> component MUST NOT be
> > +generated in an environment where a client supporting an updated URI
> > +format is expected to be available.
>
> I don't think we should deprecate userinfo now, this is coming from the
Rationale? in spice-gtk there is a warning if you make use of it:
g_warning("password may be visible in process listings");
It has been there since:
commit f4d19b3427b8f27fe9bda94c6120379d79b13547
Author: Tiziano Mueller <dev-zero@xxxxxxxxxx>
Date: Tue Jan 18 19:53:07 2011 +0100
Use g_free instead of free in fail codepath as well.
Warn if password is provided in the uri.
> VNC URI document, but there they have VncUsername/VncPassword parameters
> which we don't have in the current SPEC.
> _______________________________________________
> Spice-devel mailing list
> Spice-devel@xxxxxxxxxxxxxxxxxxxxx
> https://lists.freedesktop.org/mailman/listinfo/spice-devel
--
Marc-André Lureau
_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/spice-devel