lyx_mirror/src/insets/RenderGraphic.cpp
Tommaso Cucinotta 244de5d2c1 Add 'needauth' option to converters that need explicit user authorization.
Addressing #10481.

This patch adds the new 'needauth' option for converters launching
external programs that are capable of running arbitrary code on behalf
of the user. These converters won't be run unless the user gives explicit
authorization, which is asked on-demand when the converter is about to
be run (question is not asked if the file is cached and calling the
converter is not needed).

The user prompt has a 3rd button so that he/she's not prompted again
for (any converter over) the same document (identified through
buffer->absFileName()).

Two preference options are added:

lyxrc.use_converter_needauth_forbidden disables any converter with
the 'needauth' option, which is meant to force user to an explicit
action via the preferences pane, before being able to use advanced
converters that can potentially bring security threats;

lyxrc.use_converter_needauth enables prompting the user for 'needauth'
converters, or bypasses the check if not enabled, falling back to the
previous behavior.

So, the first option is for maximum security, the second is for
maximum usability.
2016-11-22 23:54:58 +01:00

223 lines
4.9 KiB
C++

/**
* \file RenderGraphic.cpp
* This file is part of LyX, the document processor.
* Licence details can be found in the file COPYING.
*
* \author Angus Leeming
*
* Full author contact details are available in file CREDITS.
*/
#include <config.h>
#include "RenderGraphic.h"
#include "insets/Inset.h"
#include "Buffer.h"
#include "LyX.h"
#include "LyXRC.h"
#include "MetricsInfo.h"
#include "frontends/FontMetrics.h"
#include "frontends/Painter.h"
#include "graphics/GraphicsImage.h"
#include "support/FileName.h"
#include "support/filetools.h"
#include "support/gettext.h"
#include "support/bind.h"
using namespace std;
namespace lyx {
RenderGraphic::RenderGraphic(Inset const * inset)
: loader_(inset->buffer().fileName())
{
loader_.connect(bind(&Inset::updateFrontend, inset));
}
RenderGraphic::RenderGraphic(RenderGraphic const & other, Inset const * inset)
: RenderBase(other), loader_(other.loader_), params_(other.params_)
{
loader_.connect(bind(&Inset::updateFrontend, inset));
}
RenderBase * RenderGraphic::clone(Inset const * inset) const
{
return new RenderGraphic(*this, inset);
}
void RenderGraphic::reload() const
{
loader_.reload();
}
void RenderGraphic::update(graphics::Params const & params)
{
params_ = params;
if (!params_.filename.empty())
loader_.reset(params_.filename, params_);
}
namespace {
bool displayGraphic(graphics::Params const & params)
{
return params.display && lyxrc.display_graphics;
}
docstring const statusMessage(graphics::Params const & params,
graphics::ImageStatus status)
{
docstring ret;
if (!displayGraphic(params))
ret = _("Not shown.");
else {
switch (status) {
case graphics::WaitingToLoad:
ret = _("Not shown.");
break;
case graphics::Loading:
ret = _("Loading...");
break;
case graphics::Converting:
ret = _("Converting to loadable format...");
break;
case graphics::Loaded:
ret = _("Loaded into memory. Generating pixmap...");
break;
case graphics::ScalingEtc:
ret = _("Scaling etc...");
break;
case graphics::Ready:
ret = _("Ready to display");
break;
case graphics::ErrorNoFile:
ret = _("No file found!");
break;
case graphics::ErrorConverting:
ret = _("Error converting to loadable format");
break;
case graphics::ErrorLoading:
ret = _("Error loading file into memory");
break;
case graphics::ErrorGeneratingPixmap:
ret = _("Error generating the pixmap");
break;
case graphics::ErrorUnknown:
ret = _("No image");
break;
}
}
return ret;
}
bool readyToDisplay(graphics::Loader const & loader)
{
if (!loader.image() || loader.status() != graphics::Ready)
return false;
return loader.image()->isDrawable();
}
} // namespace anon
void RenderGraphic::metrics(MetricsInfo & mi, Dimension & dim) const
{
if (displayGraphic(params_)) {
if (loader_.status() == graphics::WaitingToLoad)
loader_.startLoading();
if (!loader_.monitoring())
loader_.startMonitoring();
}
bool const image_ready = displayGraphic(params_) && readyToDisplay(loader_);
if (image_ready) {
dim.wid = loader_.image()->width() + 2 * Inset::TEXT_TO_INSET_OFFSET;
dim.asc = loader_.image()->height();
dim_ = dim;
return;
}
dim.asc = 50;
dim.des = 0;
int font_width = 0;
FontInfo msgFont(mi.base.font);
msgFont.setFamily(SANS_FAMILY);
// FIXME UNICODE
docstring const justname = from_utf8(params_.filename.onlyFileName());
if (!justname.empty()) {
msgFont.setSize(FONT_SIZE_FOOTNOTE);
font_width = theFontMetrics(msgFont).width(justname);
}
docstring const msg = statusMessage(params_, loader_.status());
if (!msg.empty()) {
msgFont.setSize(FONT_SIZE_TINY);
font_width = max(font_width,
theFontMetrics(msgFont).width(msg));
}
dim.wid = max(50, font_width + 15);
dim_ = dim;
}
void RenderGraphic::draw(PainterInfo & pi, int x, int y) const
{
// This will draw the graphics. If the graphics has not been
// loaded yet, we draw just a rectangle.
int const x1 = x + Inset::TEXT_TO_INSET_OFFSET;
int const y1 = y - dim_.asc;
int const w = dim_.wid - 2 * Inset::TEXT_TO_INSET_OFFSET;
int const h = dim_.height();
if (displayGraphic(params_) && readyToDisplay(loader_))
pi.pain.image(x1, y1, w, h, *loader_.image());
else {
Color c = pi.change_.changed() ? pi.change_.color() : Color_foreground;
pi.pain.rectangle(x1, y1, w, h, c);
// Print the file name.
FontInfo msgFont = pi.base.font;
msgFont.setPaintColor(c);
msgFont.setFamily(SANS_FAMILY);
string const justname = params_.filename.onlyFileName();
if (!justname.empty()) {
msgFont.setSize(FONT_SIZE_FOOTNOTE);
pi.pain.text(x1 + 6, y - theFontMetrics(msgFont).maxAscent() - 4,
from_utf8(justname), msgFont);
}
// Print the message.
docstring const msg = statusMessage(params_, loader_.status());
if (!msg.empty()) {
msgFont.setSize(FONT_SIZE_TINY);
pi.pain.text(x1 + 6, y - 4, msg, msgFont);
}
}
pi.change_.paintCue(pi, x1, y1, x1 + w, y1 + h);
}
} // namespace lyx