]> git.vanrenterghem.biz Git - git.ikiwiki.info.git/commit
teximg: Make TeX handle preventing unsafe things; remove insufficient blacklist
authorJosh Triplett <josh@joshtriplett.org>
Sat, 29 Aug 2009 06:07:27 +0000 (23:07 -0700)
committerJosh Triplett <josh@joshtriplett.org>
Sat, 29 Aug 2009 06:18:07 +0000 (23:18 -0700)
commit9f75d3b1f3c43820cff9ce554601f64c60d72b14
tree0b8907816f99d63ac9579c9a56ad05bd1beb1abc
parent03449610d6c666ba24bea68f01d896613e522278
teximg: Make TeX handle preventing unsafe things; remove insufficient blacklist

TeX has configuration options that prevent unsafe things like shell
escapes and insecure file reads/writes.  Turn all of them on.

teximg's regex-based blacklist does not suffice.  For instance:

[[!teximg code="""
\catcode`\%=0
%input{/etc/passwd}
"""]]

Remove the blacklist, since the TeX configuration options seal off the
underlying mechanisms more safely, and the blacklist blocks other TeX
commands that can prove useful.
IkiWiki/Plugin/teximg.pm
debian/changelog