managing untrusted metadata

[Tom Scavo]

On Fri, Apr 27, 2018 at 12:32 PM, Peter Schober
<peter.schober at univie.ac.at> wrote:
>
> For the SP but anyway:
> https://gist.github.com/peter-/612a09d530a140b5abf804ad06cd1634
>
> Name the XML files anything you like (human-friendly) and run `make`
> to create (and remove stale) symlinks with sha1-hashes as file names.

This is nice :-)

I don't know 'make' but I think the script removes all existing
symlinks and then iterates over the XML files to create new symlinks.
If so, then there's a time interval (per XML file) for which no
symlink exists. The more XML files, the longer the time lag
(especially for the files at the end of the list). I suppose this time
lag doesn't matter much in practice.

AFAICT the 'sed' command is intended to remove a two-character prefix
(./) from the output of 'find'. In that case, I believe the dot (.)
should be escaped (\.) but again in practice it probably doesn't
matter.

Tom