Part of my attempt to make some settings customizable on a per-document basis 
is the plan to allow this also for tools such as bibtex and the index 
processor. There are many use cases for this:

* you might want to use a different program for a specific document (bibtex8 
or biber for documents using biblatex, xindy instead of makeindex for one 
specific document)

* you might want to set specific program options for a specific document (e.g. 
--min-crossrefs with bibtex, --csfile with bibtex8, -s <stylefile> with 
makeindex, -m <modules> with xindy)

This all depends on the document, so the current prefs-only solution is highly 
unsatisfactory.

However, I don't know how to implement this properly. More precisely, I have 
security concerns. At first, I just wanted to implement it via "bibtex" and 
"makeindex" buffer params, that would just override the respective RCs. 
However, what if someone sends me a LyX file which has "rm -f ~ ; bibtex" as a 
bibtex converter? Next, I thought about providing a list of predefined apps 
(the apps found by configure, for that matter), let the user only chose one of 
these and let him only specify the options. But then, I'm sure there are also 
ways to launch evil programs that way (e.g., "$$i ; rm -f ~ ; bibtex").

Of course, we could just issue a (toggleable) warning if a per-document app is 
about to be launched, but is that enough?

Any ideas?

Jürgen

Reply via email to