lyx_mirror/src/insets
Tommaso Cucinotta 244de5d2c1 Add 'needauth' option to converters that need explicit user authorization.
Addressing #10481.

This patch adds the new 'needauth' option for converters launching
external programs that are capable of running arbitrary code on behalf
of the user. These converters won't be run unless the user gives explicit
authorization, which is asked on-demand when the converter is about to
be run (question is not asked if the file is cached and calling the
converter is not needed).

The user prompt has a 3rd button so that he/she's not prompted again
for (any converter over) the same document (identified through
buffer->absFileName()).

Two preference options are added:

lyxrc.use_converter_needauth_forbidden disables any converter with
the 'needauth' option, which is meant to force user to an explicit
action via the preferences pane, before being able to use advanced
converters that can potentially bring security threats;

lyxrc.use_converter_needauth enables prompting the user for 'needauth'
converters, or bypasses the check if not enabled, falling back to the
previous behavior.

So, the first option is for maximum security, the second is for
maximum usability.
2016-11-22 23:54:58 +01:00
..
CMakeLists.txt Fix compilation with cmake 2015-03-26 02:27:11 +01:00
ExternalSupport.cpp Fix substitution for $$Contents. 2016-07-31 00:15:48 -04:00
ExternalSupport.h Rationalise includes 2016-07-04 02:42:17 +02:00
ExternalTemplate.cpp Docstringify getLongString in general and preamble snippets in particular 2016-10-17 00:16:59 +02:00
ExternalTemplate.h Docstringify getLongString in general and preamble snippets in particular 2016-10-17 00:16:59 +02:00
ExternalTransforms.cpp Fix embarrassing logic mistake 2016-08-03 22:17:26 +01:00
ExternalTransforms.h Simplifications, mainly removal of boost::function and useless std::bind 2016-07-03 01:39:32 +02:00
Inset.cpp A more radical approach to inset background painting 2016-08-17 12:05:00 +02:00
Inset.h A more radical approach to inset background painting 2016-08-17 12:05:00 +02:00
InsetArgument.cpp Re-Fix #8471 2016-11-05 13:12:47 +01:00
InsetArgument.h Implement PassThru option to arguments. 2016-10-21 10:39:55 +02:00
InsetBibitem.cpp Code simplification. 2015-05-21 18:13:42 +02:00
InsetBibitem.h Fix another faulty signature 2013-04-08 15:18:04 +02:00
InsetBibtex.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetBibtex.h Update paths of included files when saving to a different folder. 2015-05-03 23:55:19 +02:00
InsetBox.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetBox.h Implement on screen rendering of alignment in LR boxes. 2015-11-23 11:40:36 +01:00
InsetBranch.cpp producesOutput() should not be redeclared as producesOutput(bool). 2016-08-28 00:04:02 -04:00
InsetBranch.h producesOutput() should not be redeclared as producesOutput(bool). 2016-08-28 00:04:02 -04:00
InsetCaption.cpp Revert most of dd7863b6. 2016-07-30 01:42:08 -04:00
InsetCaption.h Change tracking cue for InsetCaption 2016-10-18 01:06:03 +02:00
InsetCaptionable.cpp Use otexstringstream for the captions of InsetCaptionables 2016-10-17 00:16:59 +02:00
InsetCaptionable.h Use otexstringstream for the captions of InsetCaptionables 2016-10-17 00:16:59 +02:00
InsetCitation.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetCitation.h Consistency of ellipses across the UI 2015-10-05 21:16:16 +01:00
InsetCode.h Add support for \mathbin and friends 2016-11-16 15:21:53 +01:00
InsetCollapsable.cpp Simplify Changers interface 2016-11-21 00:08:11 +01:00
InsetCollapsable.h A more radical approach to inset background painting 2016-08-17 12:05:00 +02:00
InsetCommand.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetCommand.h A more radical approach to inset background painting 2016-08-17 12:05:00 +02:00
InsetCommandParams.cpp Inset files: add includes to compile with cxx11 2015-12-10 01:15:16 +01:00
InsetCommandParams.h Avoid compiler warning about overloaded virtual function. 2015-05-20 15:49:15 +02:00
InsetERT.cpp Clean-up the undo API 2015-04-01 14:18:23 +02:00
InsetERT.h Introduce max_length parameter for plaintext() output routines, 2013-03-08 15:12:58 -05:00
InsetExternal.cpp Docstringify getLongString in general and preamble snippets in particular 2016-10-17 00:16:59 +02:00
InsetExternal.h Replace Boost.Signals with Boost.Signals2 2016-06-09 22:25:34 +02:00
InsetFlex.cpp Fix dataloss when flex inset is undefined. 2016-04-11 21:02:06 +01:00
InsetFlex.h Fix conflicting inset font defaults (bug #8874) 2014-02-10 22:06:32 +01:00
InsetFloat.cpp Add safe line breaks to improve TexRow precision in subfloat & caption 2016-10-22 23:05:44 +02:00
InsetFloat.h Some compilers are worried that a struct is not the same as a class 2016-10-18 00:54:37 +02:00
InsetFloatList.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetFloatList.h Pass a BufferView to Inset::clickable 2016-05-28 17:43:01 -04:00
InsetFoot.cpp Remove tooltips from the data of Toc Items 2016-07-03 17:28:46 +02:00
InsetFoot.h Enhancements and bugfixes to the TOCs 2015-10-01 21:44:22 +01:00
InsetFootlike.cpp Revert "InsetFootlike.cpp: disable listings inside footnotes" 2015-12-07 01:52:11 -05:00
InsetFootlike.h Fix bug #6919 by splitting Inset::noFontChange() into inheritFont() and 2011-02-22 19:41:04 +00:00
InsetGraphics.cpp Use scaling factor in XHTML output. 2016-07-30 21:57:52 -04:00
InsetGraphics.h Change tracking cue: for Graphics 2016-07-03 17:28:47 +02:00
InsetGraphicsParams.cpp Remove variables set but not used 2016-05-29 17:55:46 -04:00
InsetGraphicsParams.h Do not apply \origin at existing files 2016-01-10 19:46:01 +01:00
InsetHyperlink.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetHyperlink.h Consistency of ellipses across the UI 2015-10-05 21:16:16 +01:00
InsetInclude.cpp Remove option to disable texrow 2016-09-23 23:39:48 +02:00
InsetInclude.h Replace boost::scoped_ptr with unique_ptr 2016-06-09 15:21:39 +01:00
InsetIndex.cpp Use otexstringstream for the captions of InsetCaptionables 2016-10-17 00:16:59 +02:00
InsetIndex.h Enhancements and bugfixes to the TOCs 2015-10-01 21:44:22 +01:00
InsetInfo.cpp Fix bug #9898: inset info cannot show specified icon 2015-12-11 08:51:37 +01:00
InsetInfo.h Fix bug #9898: inset info cannot show specified icon 2015-12-11 08:51:37 +01:00
InsetIPA.cpp Remove option to disable texrow 2016-09-23 23:39:48 +02:00
InsetIPA.h Force local language switch in IPA insets 2016-09-29 18:35:26 +02:00
InsetIPAMacro.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetIPAMacro.h Consistency of ellipses across the UI 2015-10-05 21:16:16 +01:00
InsetLabel.cpp Fix std::string docstream output error 2015-10-15 20:52:28 +02:00
InsetLabel.h Enhancements and bugfixes to the TOCs 2015-10-01 21:44:22 +01:00
InsetLayout.cpp Implement PassThru option to arguments. 2016-10-21 10:39:55 +02:00
InsetLayout.h Layout format update: AddToToc, IsTocCaption, OutlinerName 2015-12-13 19:56:49 +00:00
InsetLine.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetLine.h Remove ; from end of function definitions 2013-05-12 13:04:18 +02:00
InsetListings.cpp Safe line break to increase precision of error reporting in Listings caption 2016-10-22 22:39:33 +02:00
InsetListings.h Some compilers are worried that a struct is not the same as a class 2016-10-18 00:54:37 +02:00
InsetListingsParams.cpp Add comments to fix coverity #23505 and 23507. 2016-06-12 00:35:49 -04:00
InsetListingsParams.h New class InsetCaptionable 2015-09-15 15:25:33 +01:00
InsetMarginal.cpp Remove tooltips from the data of Toc Items 2016-07-03 17:28:46 +02:00
InsetMarginal.h Enhancements and bugfixes to the TOCs 2015-10-01 21:44:22 +01:00
InsetNewline.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetNewline.h Introduce max_length parameter for plaintext() output routines, 2013-03-08 15:12:58 -05:00
InsetNewpage.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetNewpage.h Introduce max_length parameter for plaintext() output routines, 2013-03-08 15:12:58 -05:00
InsetNomencl.cpp Show symbol name and description in plaintext export of nomenclature entries. 2016-10-31 10:50:33 +01:00
InsetNomencl.h Show symbol name and description in plaintext export of nomenclature entries. 2016-10-31 10:50:33 +01:00
InsetNote.cpp Do not hardcode required packages for Note inset 2016-09-21 16:11:53 +02:00
InsetNote.h Enhancements and bugfixes to the TOCs 2015-10-01 21:44:22 +01:00
InsetPhantom.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetPhantom.h Introduce max_length parameter for plaintext() output routines, 2013-03-08 15:12:58 -05:00
InsetPreview.cpp Remove option to disable texrow 2016-09-23 23:39:48 +02:00
InsetPreview.h Change tracking cue: for instant preview 2016-07-03 17:28:47 +02:00
InsetQuotes.cpp A more radical approach to inset background painting 2016-08-17 12:05:00 +02:00
InsetQuotes.h A more radical approach to inset background painting 2016-08-17 12:05:00 +02:00
InsetRef.cpp Docstringify getLongString in general and preamble snippets in particular 2016-10-17 00:16:59 +02:00
InsetRef.h Consistency of ellipses across the UI 2015-10-05 21:16:16 +01:00
InsetScript.cpp RefChanger 2016-06-13 08:46:15 +01:00
InsetScript.h Cleanup handling of LFUN_LAYOUT_PARAGRAPH in getStatus 2016-05-29 17:55:46 -04:00
InsetSeparator.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetSeparator.h Allow inset-forall to match separators (#10090) 2016-05-17 00:48:26 +01:00
InsetSpace.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetSpace.h Pass a BufferView to Inset::clickable 2016-05-28 17:43:01 -04:00
InsetSpecialChar.cpp When selecting special logos, set their color correctly 2016-10-25 15:13:23 +02:00
InsetSpecialChar.h A more radical approach to inset background painting 2016-08-17 12:05:00 +02:00
InsetTabular.cpp Move class definitions inside main class 2016-10-22 23:24:01 +02:00
InsetTabular.h Fix output of table borders for XHTML. Fixes bug #10154. 2016-07-30 20:15:12 -04:00
InsetText.cpp Implement PassThru option to arguments. 2016-10-21 10:39:55 +02:00
InsetText.h Use otexstringstream for the captions of InsetCaptionables 2016-10-17 00:16:59 +02:00
InsetTOC.cpp Better construction of the TOC for floats and captions 2015-09-15 15:25:33 +01:00
InsetTOC.h Simplify class structure in TocBackend 2016-05-29 17:55:42 -04:00
InsetVSpace.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetVSpace.h Pass a BufferView to Inset::clickable 2016-05-28 17:43:01 -04:00
InsetWrap.cpp Rationalise includes 2016-07-04 02:42:17 +02:00
InsetWrap.h New class InsetCaptionable 2015-09-15 15:25:33 +01:00
RenderBase.h Fix a bunch of minor issues discovered by the cppcheck script. 2014-04-21 11:52:00 -04:00
RenderButton.cpp Remove extra spacing around InsetCommand buttons 2016-05-29 17:55:46 -04:00
RenderButton.h
RenderGraphic.cpp Add 'needauth' option to converters that need explicit user authorization. 2016-11-22 23:54:58 +01:00
RenderGraphic.h
RenderPreview.cpp Change tracking cue: for instant preview 2016-07-03 17:28:47 +02:00
RenderPreview.h Replace Boost.Signals with Boost.Signals2 2016-06-09 22:25:34 +02:00