On Thu, Jun 08, 2017 at 12:48:21AM +0200, Guillaume MM wrote: > Le 29/05/2017 à 23:53, Scott Kostyshak a écrit : > > > > It would be nice to make the process of temporarily using -shell-escape > > more user-friendly.[...] > > > > One solution is to add a set of converters, one for each LaTeX flavor, > > and then to specify the "needauth" flag for those converters.[...] > > > > Any thoughts? > > It has been well explained why the needauth option is bad in terms of > security, notably in messages by Helge. > > https://www.mail-archive.com/lyx-devel@lists.lyx.org/msg198111.html > https://www.mail-archive.com/lyx-devel@lists.lyx.org/msg198123.html > > I did not raise issues with its inclusion because it was still an > improvement compared to the situation before. But if needauth becomes an > argument to include "--shell-escape" converters, it will actually have > managed to make LyX less safe, I believe.
I see. Thanks for pointing this out. Scott
