In pycalendar/plann#46 it's suggested to allow for a caldav_pass_command in the configuration file, i.e. allowing a password to be looked up from a a password safe. The logic is sound, but belongs to the CalDAV libary.
It's important to consider and mitigate any potential security impacts. At the very least, it's needed to check that only owner has write permission. Command should probably be a list instead of a shell command, with the first item in the list being an executable file.
In pycalendar/plann#46 it's suggested to allow for a
caldav_pass_commandin the configuration file, i.e. allowing a password to be looked up from a a password safe. The logic is sound, but belongs to the CalDAV libary.It's important to consider and mitigate any potential security impacts. At the very least, it's needed to check that only owner has write permission. Command should probably be a list instead of a shell command, with the first item in the list being an executable file.