anne/lyx_mirror
1
0
Fork 0
mirror of https://git.lyx.org/repos/lyx.git synced 2024-11-26 19:25:39 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update a bit

Browse Source 
git-svn-id: svn://svn.lyx.org/lyx/lyx-devel/trunk@29462 a592a061-630c-0410-9148-cb99ea01b6c8
This commit is contained in:
Pavel Sanda 2009-05-01 09:30:37 +00:00
parent ffc71354d0
commit 65389071ef
1 changed files with 2 additions and 69 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
lib/doc/Customization.lyx
View File

@ -1,5 +1,5 @@
#LyX 2.0.0svn created this file. For more info see http://www.lyx.org/
\lyxformat 353
\lyxformat 354
\begin_document
\begin_header
\textclass scrbook
@ -116,9 +116,6 @@ End
\output_changes false
\author ""
\author ""
\author ""
\author ""
\author ""
\end_header
\begin_body
@ -15567,28 +15564,6 @@ name "sec:Security-discussion"
Security discussion
\end_layout
\begin_layout Standard
\begin_inset Box Shadowbox
position "t"
hor_pos "c"
has_inner_box 1
inner_pos "t"
use_parbox 0
width "100col%"
special "none"
height "1in"
height_special "totalheight"
status open
\begin_layout Plain Layout
WARNING: This section is definitely outdated.
\end_layout
\end_inset
\end_layout
\begin_layout Standard
The external material feature interfaces with a lot of external programs
and does so automatically, so we have to consider the security implications
@ -15636,49 +15611,7 @@ This also implies that you are restricted in what command strings you can
If you want to use some of the shell features, you should write a safe
script to do this in a controlled manner, and then invoke the script from
the command string.
In the
\begin_inset Flex CharStyle:Code
status collapsed
\begin_layout Plain Layout
lib/scripts
\end_layout
\end_inset
directory of the LyX installation, you can find a safe wrapper script
\begin_inset Flex CharStyle:Code
status collapsed
\begin_layout Plain Layout
general_command_wrapper.py
\end_layout
\end_inset
that supports redirection of input and output.
That can serve as an example for how to write safe template scripts.
For a more advanced example that uses
\begin_inset Flex CharStyle:Code
status collapsed
\begin_layout Plain Layout
fork
\end_layout
\end_inset
and friends, take a look at the
\begin_inset Flex CharStyle:Code
status collapsed
\begin_layout Plain Layout
pic2ascii.py
\end_layout
\end_inset
converter script.
\end_layout
\begin_layout Standard