trying to bring this back in the pile :)

[git.ikiwiki.info.git] / doc / plugins / contrib / bibtex2html / discussion.mdwn

diff --git a/doc/plugins/contrib/bibtex2html/discussion.mdwn b/doc/plugins/contrib/bibtex2html/discussion.mdwn
index 86686929c188ff5995ed0168185f9eb4383b3111..3e4207e4ec02f83d418ce35348f3d2307d06edb8 100644 (file)
--- a/doc/plugins/contrib/bibtex2html/discussion.mdwn
+++ b/doc/plugins/contrib/bibtex2html/discussion.mdwn
@@ -112,6 +112,10 @@ Right now, it is not possible for the [[plugins/contrib/compile]] plugin to rend
 >>>> which prevents (?) shell injections. This adds the burden of manipulating
 >>>> arrays instead of strings, but security should be improved.
 >>>>
 >>>> which prevents (?) shell injections. This adds the burden of manipulating
 >>>> arrays instead of strings, but security should be improved.
 >>>>

+>>>> But none of those ideas solve the problems you mentionned, being that
+>>>> external commands can do nasty things (the `-oclobberfile` option of
+>>>> `bibtex2html`) or contain bugs (like ImageMagick).
+>>>>

 >>>> If we want to merge this plugin and compile, I think a better idea than the one
 >>>> I proposed at the beginning of the discussion would be to provide two different
 >>>> directives: a `\[[!compile "foo.bar"]]` would compile the file and render it as a
 >>>> If we want to merge this plugin and compile, I think a better idea than the one
 >>>> I proposed at the beginning of the discussion would be to provide two different
 >>>> directives: a `\[[!compile "foo.bar"]]` would compile the file and render it as a