draft registration of application/vnd.kde.kpartgui+xml

Marc Mutz Marc.Mutz at uni-bielefeld.de
Wed Jul 3 23:19:20 BST 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi!

Next round. I'm tired of reading about ANNs, SOMs and PCAs today ;-)

Here comes the first draft for the kpartgui xml application (I used this 
term - is it correct?) mime type registration. As always, pay 
particularly close attention to the security considerations (yes, I 
know you never knew that kpartgui files are _that_ dangerous ;-):


To: ietf-types at iana.org
Subject: Registration of MIME media type 
application/vnd.kde.kpartgui+xml

MIME media type name: application

MIME subtype name: vnd.kde.kpartgui+xml

Required parameters: none

Optional parameters: none

Encoding considerations: (is there a std text for XML files?)

	Since KPartGui files are XML applications, 7bit is often
	appropriate. For the rare case that identifiers are not
	US-ASCII, 8bit should be used.

Security considerations:

        KPartGui files can include personal toolbar layouts and
        keybinding definition.  To the extend that such metadata can
        be considered private, sending a KPartGui file could lead to
        leakage of this type of information.  A well-placed KPartGui
        file can be used to change the layout of toolbars and the
        binding of shortcut keys to application actions. This could
        potentially be used to trick the user in executing an action
        that she did not intend to execute.

	Other than the above, it is believed that usage of this
        mimetype does not introduce security concerns other that those
        already inherent in XML documents.

Interoperability considerations: none

Published specification:

        The DTD of the KPartGui XML application can be obtained from
        http://www.kde.org/DTD/kpartgui-current.dtd (### to be adjusted)

        A description of the format is contained in the DTD file in
        the form of comments.

Applications which use this media type:

	All KDE applications that make use of the XMLGUI framework,
	esp. those using KParts technology.

Additional information:

        Magic numbers: XML document with root node "kpartgui"
        File extensions: none specific, usually rc
        Macintosh File Type Codes: n/a

Person & email address to contact for further information:

        <anyone?>

Intended usage: COMMON

Author/Change contoller: Marc Mutz <mutz at kde.org>

Marc

- -- 
Marc Mutz <mutz at kde.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9I3ho3oWD+L2/6DgRAqalAJ9Ef9nLTQUP5lxVz9J/9vPGN+lQaQCgnBP6
eK3xJSPqH53xx7OSxIdV6Qk=
=NZFs
-----END PGP SIGNATURE-----





More information about the kde-core-devel mailing list