mirror of
https://git.lyx.org/repos/lyx.git
synced 2024-11-23 10:18:50 +00:00
Update a bit
git-svn-id: svn://svn.lyx.org/lyx/lyx-devel/trunk@29462 a592a061-630c-0410-9148-cb99ea01b6c8
This commit is contained in:
parent
ffc71354d0
commit
65389071ef
@ -1,5 +1,5 @@
|
|||||||
#LyX 2.0.0svn created this file. For more info see http://www.lyx.org/
|
#LyX 2.0.0svn created this file. For more info see http://www.lyx.org/
|
||||||
\lyxformat 353
|
\lyxformat 354
|
||||||
\begin_document
|
\begin_document
|
||||||
\begin_header
|
\begin_header
|
||||||
\textclass scrbook
|
\textclass scrbook
|
||||||
@ -116,9 +116,6 @@ End
|
|||||||
\output_changes false
|
\output_changes false
|
||||||
\author ""
|
\author ""
|
||||||
\author ""
|
\author ""
|
||||||
\author ""
|
|
||||||
\author ""
|
|
||||||
\author ""
|
|
||||||
\end_header
|
\end_header
|
||||||
|
|
||||||
\begin_body
|
\begin_body
|
||||||
@ -15567,28 +15564,6 @@ name "sec:Security-discussion"
|
|||||||
Security discussion
|
Security discussion
|
||||||
\end_layout
|
\end_layout
|
||||||
|
|
||||||
\begin_layout Standard
|
|
||||||
\begin_inset Box Shadowbox
|
|
||||||
position "t"
|
|
||||||
hor_pos "c"
|
|
||||||
has_inner_box 1
|
|
||||||
inner_pos "t"
|
|
||||||
use_parbox 0
|
|
||||||
width "100col%"
|
|
||||||
special "none"
|
|
||||||
height "1in"
|
|
||||||
height_special "totalheight"
|
|
||||||
status open
|
|
||||||
|
|
||||||
\begin_layout Plain Layout
|
|
||||||
WARNING: This section is definitely outdated.
|
|
||||||
\end_layout
|
|
||||||
|
|
||||||
\end_inset
|
|
||||||
|
|
||||||
|
|
||||||
\end_layout
|
|
||||||
|
|
||||||
\begin_layout Standard
|
\begin_layout Standard
|
||||||
The external material feature interfaces with a lot of external programs
|
The external material feature interfaces with a lot of external programs
|
||||||
and does so automatically, so we have to consider the security implications
|
and does so automatically, so we have to consider the security implications
|
||||||
@ -15636,49 +15611,7 @@ This also implies that you are restricted in what command strings you can
|
|||||||
If you want to use some of the shell features, you should write a safe
|
If you want to use some of the shell features, you should write a safe
|
||||||
script to do this in a controlled manner, and then invoke the script from
|
script to do this in a controlled manner, and then invoke the script from
|
||||||
the command string.
|
the command string.
|
||||||
In the
|
|
||||||
\begin_inset Flex CharStyle:Code
|
|
||||||
status collapsed
|
|
||||||
|
|
||||||
\begin_layout Plain Layout
|
|
||||||
lib/scripts
|
|
||||||
\end_layout
|
|
||||||
|
|
||||||
\end_inset
|
|
||||||
|
|
||||||
directory of the LyX installation, you can find a safe wrapper script
|
|
||||||
\begin_inset Flex CharStyle:Code
|
|
||||||
status collapsed
|
|
||||||
|
|
||||||
\begin_layout Plain Layout
|
|
||||||
general_command_wrapper.py
|
|
||||||
\end_layout
|
|
||||||
|
|
||||||
\end_inset
|
|
||||||
|
|
||||||
that supports redirection of input and output.
|
|
||||||
That can serve as an example for how to write safe template scripts.
|
|
||||||
For a more advanced example that uses
|
|
||||||
\begin_inset Flex CharStyle:Code
|
|
||||||
status collapsed
|
|
||||||
|
|
||||||
\begin_layout Plain Layout
|
|
||||||
fork
|
|
||||||
\end_layout
|
|
||||||
|
|
||||||
\end_inset
|
|
||||||
|
|
||||||
and friends, take a look at the
|
|
||||||
\begin_inset Flex CharStyle:Code
|
|
||||||
status collapsed
|
|
||||||
|
|
||||||
\begin_layout Plain Layout
|
|
||||||
pic2ascii.py
|
|
||||||
\end_layout
|
|
||||||
|
|
||||||
\end_inset
|
|
||||||
|
|
||||||
converter script.
|
|
||||||
\end_layout
|
\end_layout
|
||||||
|
|
||||||
\begin_layout Standard
|
\begin_layout Standard
|
||||||
|
Loading…
Reference in New Issue
Block a user