view .hgignore @ 4212:5f2d496c633f

core: get rid of `pickle`: Use of `pickle` to serialise data was a technical legacy that was causing trouble to store in database, to update (if a class was serialised, a change could break update), and to security (pickle can lead to code execution). This patch remove all use of Pickle in favour in JSON, notably: - for caching data, a Pydantic model is now used instead - for SQLAlchemy model, the LegacyPickle is replaced by JSON serialisation - in XEP-0373 a class `PublicKeyMetadata` was serialised. New method `from_dict` and `to_dict` method have been implemented to do serialisation. - new methods to (de)serialise data can now be specified with Identity data types. It is notably used to (de)serialise `path` of avatars. A migration script has been created to convert data (for upgrade or downgrade), with special care for XEP-0373 case. Depending of size of database, this migration script can be long to run. rel 443
author Goffi <goffi@goffi.org>
date Fri, 23 Feb 2024 13:31:04 +0100
parents 84f6bee6440d
children
line wrap: on
line source

syntax: glob
bridge_constructor/generated
.build
build
ctags_links/
dist/
.eggs/
env/
libervia_backend.egg-info/
MANIFEST
.mypy_cache/
*.orig
*.pyc
*.pyo
.pytest_cache
*.pyv
Session.vim
stubs/
*.swo
*.swp
tags
tests/e2e/report*
_trial_temp/
twistd.log
twistd.pid
twisted/plugins/dropin.cache
*.un~
.vim
.vscode