XML for configuration files, why? -


Why use XML for so many project configuration files?

This is an important question.

Most options (JSON, YAM, INI files) are easy to parse XML.

In addition, in languages ​​such as Python - where everything is source - it is easy to put your configuration into a clearly labeled Python module.

Still, some people would say that XML has some advantage over JSON or Python

What is it about XML that the "universality" of XML syntax is specific for an application While writing files, does not really apply much, since portability of a configuration file does not make any difference, some Python people write their configuration files in Python.

Edit

A configuration file does not matter "Configuring a Python Program in Python Is A Security Risk" Logic It seems to ignore the fact that Python is already installed and running in the form of a source. Why does a complex hack work in the configuration file when you have a source? Just hack the source.

I have heard that people say that "somebody" can hack through your app configuration file. Who is this "someone"? Sysadmin? DBA? the creator? There are not many mysterious "no" people with access to configuration files.

And for anyone who can hack the Python configuration file for any deceptive purposes, it may possibly install keloggers, fake certificates or other serious threats.


Comments

Popular posts from this blog

python - Overriding the save method in Django ModelForm -

html - CSS autoheight, but fit content to height of div -

qt - How to prevent QAudioInput from automatically boosting the master volume to 100%? -