[QGIS-Developer] QGIS logger plugin in core

[Nyall Dawson]

On Mon, 23 Mar 2020 at 01:53, Tim Sutton <tim at kartoza.com> wrote:
>
> Hi All
>
> A while ago we had a discussion here on the mailing list about adding Network logging to QGIS, similar to what you can do in your browser[1]. Nyall at the time (maybe others) was concerned about security implications of including a network logging tool in QGIS. We were wondering what specific security impacts could be expected (as opposed to for example installing Richard’s very nice logger plugin)[2]? In other words, is there really a good rationale not to port this to C++ and integrate into QGIS core? I think it is very broadly useful for anyone working with remote layers and trying to figure out why they are not loading...

I'm a tentative +1 now. My original security concerns were dismissed
because... well.. we can't really stop this information leaking anyway
(cos Qt), so a malicious plugin will always be able to capture the
requests. In fact, having it in c++ will potentially lower the risk,
cos there's less need for 3rd party plugins to cover this use case
(that said: Richard maintains the existing Network Logger plugin, so
that one can be implicitly trusted -- this concern would only extend
to other future network logger style plugins from other sources!).

Also, it's **extremely** useful.

Now, some thoughts:
- it would **definitely** need to be ported to c++. The plugin has an
issue where it slows down after logging and displaying many requests
in the tree. Both Richard and I spent considerable time trying to
avoid this, with minimal results. A c++ version should give us more
flexibility to address the performance issue. (and note: this IS a
serious issue, as it can cause the whole QGIS UI to slow, not just the
network logger dock)
- some nice icons are definitely required :)

Nyall

>
> Regards
>
> Tim
>
>
>
> [1] http://osgeo-org.1560.x6.nabble.com/QGIS-Developer-URL-Request-logging-of-QGIS-tp5382271p5382330.html
> [2] https://plugins.qgis.org/plugins/qgisnetworklogger/
>
> —
>
>
>
>
>
>
>
>
> Tim Sutton
>
> Co-founder: Kartoza
> Ex Project chair: QGIS.org
>
> Visit http://kartoza.com to find out about open source:
>
> Desktop GIS programming services
> Geospatial web development
> GIS Training
> Consulting Services
>
> Skype: timlinux
> IRC: timlinux on #qgis at freenode.net
>
> I'd love to connect. Here's my calendar link to make finding time easy.
>
> _______________________________________________
> QGIS-Developer mailing list
> QGIS-Developer at lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer