diff options
| author | Marc Mutz <marc.mutz@qt.io> | 2025-09-26 09:50:28 +0200 |
|---|---|---|
| committer | Marc Mutz <marc.mutz@qt.io> | 2025-09-26 18:23:44 +0200 |
| commit | f7fd1f55ccb1ae277a8daaaa6a1ee3e64bd4872b (patch) | |
| tree | 35930a5e5f4c2957fcf0d83bd6a4d04da9f12edf /src | |
| parent | ad6afabdb244cf9bab9dc2767442c3fe17b1cf13 (diff) | |
Mark QUnicodeTables as security-significant (= default)
This component does not process external data, so it is not
security-critical.
Yes, the characters presented to its functions may come from external
sources, but that's not different from, say, a QRect being parsed from
-geometry. The fact that there is code that parses a -geometry into a
QRect doesn't make QRect a data-parser, or security-critical. It's
just container for the result, and so is QUnicodeTables: a container
for char32_t-indexed properties.
This accompanying qt_attribution.json confirms that this component is
not security-critical.
Task-number: QTBUG-135195
Pick-to: 6.10 6.8
Change-Id: I565bd885220c0282ce7fb801411f12a80052465f
Reviewed-by: Ivan Solovev <ivan.solovev@qt.io>
Diffstat (limited to 'src')
| -rw-r--r-- | src/corelib/text/qunicodetables.cpp | 1 | ||||
| -rw-r--r-- | src/corelib/text/qunicodetables_p.h | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/src/corelib/text/qunicodetables.cpp b/src/corelib/text/qunicodetables.cpp index 22bc7f92874..22a665089e3 100644 --- a/src/corelib/text/qunicodetables.cpp +++ b/src/corelib/text/qunicodetables.cpp @@ -1,5 +1,6 @@ // Copyright (C) 2020 The Qt Company Ltd. // SPDX-License-Identifier: Unicode-3.0 +// Qt-Security score:significant reason:default /* This file is autogenerated from the Unicode 16.0 database. Do not edit */ diff --git a/src/corelib/text/qunicodetables_p.h b/src/corelib/text/qunicodetables_p.h index d7b71f57d05..ac624dba789 100644 --- a/src/corelib/text/qunicodetables_p.h +++ b/src/corelib/text/qunicodetables_p.h @@ -1,5 +1,6 @@ // Copyright (C) 2020 The Qt Company Ltd. // SPDX-License-Identifier: Unicode-3.0 +// Qt-Security score:significant reason:default /* This file is autogenerated from the Unicode 16.0 database. Do not edit */ |