[Interest] rebooted QtWebKit for Qt4??

Giuseppe D'Angelo giuseppe.dangelo at kdab.com
Mon Jul 13 15:26:23 CEST 2020


Il 13/07/20 14:30, Roland Hughes ha scritto:
> Let us not forget that QML+JavaScript is completely insecure in the
> OpenSource world. All of that JavaScript gets stuffed into the binary
> you ship as free text. Anyone with a decent text editor can read/extract
> your super secret proprietary algorithms. Worse yet, anyone with enough
> patience can change a binary in the field.

If you have the source, then why do you need to bother with extracting 
binaries?


If you meant in the *non* opensource world, then:

1) the QML compiler has been a reality for a number of years;

2) your "super secret" algorithms belong to C++, not to QML, so using or 
not using QML doesn't change the equation. And, you can obfuscate the 
JavaScript code used by your QML part.


My 2 c,
-- 
Giuseppe D'Angelo | giuseppe.dangelo at kdab.com | Senior Software Engineer
KDAB (France) S.A.S., a KDAB Group company
Tel. France +33 (0)4 90 84 08 53, http://www.kdab.com
KDAB - The Qt, C++ and OpenGL Experts

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4329 bytes
Desc: Firma crittografica S/MIME
URL: <http://lists.qt-project.org/pipermail/interest/attachments/20200713/2eaba110/attachment.bin>


More information about the Interest mailing list