On 22/09/2010 5:12 AM, Pavel Sanda wrote:
Julien Rioux wrote:
Thanks, but hold on... lilypond-book can run evil scheme code included
within the lilypond snippets!
lilypond itself has a -dsafe command-line switch but lilypond-book doesn't
have that, or I couldn't find it. We need to ensure lilypond-book can be
run in safe mode before shipping our module with 2.0
too bad. what do you propose?
pavel
I asked on lilypond-user list and there is no safe mode for
lilypond-book. I see three ways of action:
- Request for a safe-mode for lilypond-book, have it fixed upstream,
then support in LyX only newer versions which have a safe mode. (I'll
send the request to bug-lilypond)
- Fix lilypond-book ourselves and distribute that with LyX (it's a
python script). Or, at least, mimic its functionality: Extract the
inline code to separate files and compile them with lilypond -dsafe.
- Remove lilypond-book support in LyX.
--
Julien
