The web interface is optional. It is written using Yesod as well, so any security issue that couldn't be fixed by sticking a .htaccess-obeying server in front of it would surprise me (compile time XSS security, CSRF for free, compile-checked links, etc.). There is also the command line interface (which I use with Vim for editing). It's also data-file compatible with ledger itself.
Posted May 31, 2012 20:13 UTC (Thu) by nybble41 (subscriber, #55106)
[Link]
> The web interface is optional.
Oh, that's good. I saw the demo on their web site and assumed that HTML was the primary/only interface.
> It's also data-file compatible with ledger itself.
And here is a good reason for using plain text files: an RDBMS storage backend would have been unlikely to interoperate with other programs. Note that it couldn't be shared, of course, but the programs would need to agree on a precise database schema where text files, given an extensible syntax, offer more flexibility.