mirror of
https://git.lyx.org/repos/lyx.git
synced 2024-11-22 18:08:10 +00:00
244de5d2c1
Addressing #10481. This patch adds the new 'needauth' option for converters launching external programs that are capable of running arbitrary code on behalf of the user. These converters won't be run unless the user gives explicit authorization, which is asked on-demand when the converter is about to be run (question is not asked if the file is cached and calling the converter is not needed). The user prompt has a 3rd button so that he/she's not prompted again for (any converter over) the same document (identified through buffer->absFileName()). Two preference options are added: lyxrc.use_converter_needauth_forbidden disables any converter with the 'needauth' option, which is meant to force user to an explicit action via the preferences pane, before being able to use advanced converters that can potentially bring security threats; lyxrc.use_converter_needauth enables prompting the user for 'needauth' converters, or bypasses the check if not enabled, falling back to the previous behavior. So, the first option is for maximum security, the second is for maximum usability. |
||
|---|---|---|
| .. | ||
| bind | ||
| commands | ||
| doc | ||
| examples | ||
| fonts | ||
| images | ||
| kbd | ||
| layouts | ||
| lyx2lyx | ||
| scripts | ||
| templates | ||
| tex | ||
| ui | ||
| .gitignore | ||
| appdata.xml | ||
| autocorrect | ||
| build-listerrors | ||
| chkconfig.ltx | ||
| configure.py | ||
| CREDITS | ||
| encodings | ||
| external_templates | ||
| generate_contributions.py | ||
| languages | ||
| latexfonts | ||
| layouttranslations | ||
| layouttranslations.review | ||
| lyx.desktop.in | ||
| Makefile.am | ||
| RELEASE-NOTES | ||
| symbols | ||
| syntax.default | ||
| unicodesymbols | ||