[Interest] Avoid readable QML files in application

Thiago Macieira thiago.macieira at intel.com
Wed May 23 15:08:38 CEST 2018


On Wednesday, 23 May 2018 07:38:14 -03 Van Gucht, Sam wrote:
> As a company(Medical) policy, we don't allow readable files on the user PC
> in order to protect patient information. This means the information our
> application saves and Qt specific files, such as QML files. Our custom QML
> files are compiled into libraries with qrc. We do the same do for the QML
> files from Qt (Quick.Controls, GraphicalsEffects, ...). But for certain
> modules this doesn't work, eg. Quick.Controls2.

Please note that resources are no protection. The files are often compressed 
(not always), but they are still available to the application. Any developer 
with a modicum of Qt knowledge can intercept the file engine and extract all 
files added to the resources of an .exe or .dll.

-- 
Thiago Macieira - thiago.macieira (AT) intel.com
  Software Architect - Intel Open Source Technology Center






More information about the Interest mailing list