Re: Restricting Postgres

On Thu, Nov 04, 2004 at 23:32:57 +0000,
Matt Clark <matt(at)ymogen(dot)net> wrote:
> >
> > I think in the future there will be a good bit of presentation
> >login in the client...
>
> Not if Bruno has his way ;-)

Sure there will, but it will be controlled by the client, perhaps taking
suggestions from the style sheet pointed to by the document.

Running foreign code from random or even semi-random places is a recipe
for becoming a spam server. See examples from Microsoft such as their
spreadsheet and office software. Documents really need to be passive
data, not active code.

If the client and the server have a special trust relationship, then
running code supplied by the server makes sense. So you might use javascript
within a business where the IT department runs the server and the employees
run clients. However, encouraging people to browse the internet with
javascript enabled is a bad idea.