On Fri, Aug 17, 2007 at 09:48:28PM -0300, Bruno Dilly wrote:
- What is the right URL?
The URL of the library you want to use: openclipart.org
- Why is it configurable?
I let it configurable for two reasons:
- if someone want to use another library based on ccHost (maybe he
want to create one for his work group, or something like that) he could change the URL, and it should work fine.
- if Open Clip Art Library changes its url, the Inkscape user won't
need to download a new version of Inkscape (OK, I believe the probability of this happen is near 0)
But there are any problem letting it configurable? What the other guys think about it?
It's good to have it configurable - imagine an art studio may wish to provide their own clipart repo, or a college may wish to provide a cached mirror of openclipart for student use to ease bandwidth.
Here I would like to have a reset to default button behind the URL. (If the URL really need to be an user visible option) The other think that I don't like is that the password is saved in plain text in the preferences.xml. Perhaps you can find a better solution here.
When I was coding it, I thank the same thing. So I took a look in the Gaim and SVN approaches, and they save in plain text, too. I could give the option to input your username and password when you try to export the document, so it won't be stored. But you will have to do it everytime. What do you think about it?
Even if they do it, saving passwords in plain text is rarely a good idea. For now, keep the password in memory but only prompt once at first use per Inkscape session. This isn't perfect, since someone could for example get the password out of a crash dump or memory dump, but it will at least eliminate a lot of blatant security risks.
Kees, do you have recommendations here?
Bryce