diff options
| author | Marc Mutz <marc.mutz@qt.io> | 2025-09-26 09:50:28 +0200 |
|---|---|---|
| committer | Marc Mutz <marc.mutz@qt.io> | 2025-09-26 18:23:44 +0200 |
| commit | f7fd1f55ccb1ae277a8daaaa6a1ee3e64bd4872b (patch) | |
| tree | 35930a5e5f4c2957fcf0d83bd6a4d04da9f12edf /src/corelib/text/qstringbuilder.cpp | |
| parent | ad6afabdb244cf9bab9dc2767442c3fe17b1cf13 (diff) | |
Mark QUnicodeTables as security-significant (= default)
This component does not process external data, so it is not
security-critical.
Yes, the characters presented to its functions may come from external
sources, but that's not different from, say, a QRect being parsed from
-geometry. The fact that there is code that parses a -geometry into a
QRect doesn't make QRect a data-parser, or security-critical. It's
just container for the result, and so is QUnicodeTables: a container
for char32_t-indexed properties.
This accompanying qt_attribution.json confirms that this component is
not security-critical.
Task-number: QTBUG-135195
Pick-to: 6.10 6.8
Change-Id: I565bd885220c0282ce7fb801411f12a80052465f
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
Diffstat (limited to 'src/corelib/text/qstringbuilder.cpp')
0 files changed, 0 insertions, 0 deletions