[Bugs] #3203 UNSP: Need to check Sugar for places where we might break on invalid data from the outside

[Sugar Labs Bugs]

#3203: Need to check Sugar for places where we might break on invalid data from
the outside
------------------------------------------+---------------------------------
    Reporter:  sascha_silbe               |          Owner:                             
        Type:  task                       |         Status:  new                        
    Priority:  Unspecified by Maintainer  |      Milestone:  Unspecified by Release Team
   Component:  sugar                      |        Version:  Git as of bugdate          
    Severity:  Major                      |       Keywords:                             
Distribution:                             |   Status_field:  New                        
------------------------------------------+---------------------------------
 #3200 has shown that we need to be careful about any data we get passed
 from the outside, e.g. via activity bundles. Invalid data from the outside
 - regardless whether it's because of user (developer) mistake, corrupted
 files or even outright malice - should not be be able to impact regular
 Sugar operation. We need to audit all places where we handle data from the
 outside and check for potential breakage.

 Hardening e.g. sugar-toolkit against broken icons doesn't help:
  1. If a system icon is broken, we'll want to know that.
  1. Different parts of the system will want to take different actions
 (e.g. different default icons) for invalid data.

-- 
Ticket URL: <http://bugs.sugarlabs.org/ticket/3203>
Sugar Labs <http://sugarlabs.org/>
Sugar Labs bug tracking system