Changes between Version 19 and Version 20 of WikiStart

Timestamp:

07/27/21 14:16:59 (3 years ago)

Author:

Wouter Pasman

Comment:

--

WikiStart

@@ -10 +10 @@
 
 A specification and full reference implementation of the GeniusWeb core is available [https://tracinsy.ewi.tudelft.nl/pubtrac/GeniusWeb here]
+
+== Security considerations
+GeniusWebPython assumes python parties are packaged using the standard tar.gz distribution format. This implies that the package is not fully self-contained: it requires dependent libraries to be installed separately, according to setup.py included in the package. This dependency on later installation steps poses an additional security risk compared to the fully self-contained java jar packaging.
 
 = Overview of the available core objects
@@ -127 +130 @@
 A special warning is in place regarding throwing exceptions from your implementation, particularly from notifyChange. In line with the general Listener interface, exceptions are only logged and your party usually is immediately disconnected if it throws any exception. Make sure that you free up any used resources to avoid memory leaks if you really need to throw an exception. 
 
-=== Preparing the jar file
-In order to put your party on the [https://tracinsy.ewi.tudelft.nl/pubtrac/GeniusWebPythonPartiesServer pypartiesserver] for running, you need a tar.gz file of your party.
+=== Preparing the tar.gz file
+Your party has to be packaged as a standard tar.gz file for deployment on the [https://tracinsy.ewi.tudelft.nl/pubtrac/GeniusWebPythonPartiesServer pypartiesserver]. 
 
 In contrast with java, python tar.gz files do not contain their dependent libraries. References to the dependent libraries are stored in the setup.py program inside the tar.gz file. The pypartiesserver runs a standard {{{pip install <your.tar.gz>}}} to install your party for use.