Am Sonntag, 13. Februar 2005 12:36 schrieb Angus Leeming:

> Because it is a huge security hole if we don't protect individual 
arguments
> with quotes. Consider $$p as `rm -rf $HOME/*`. Remember that the value 
for
> $$p is stored in the LyX file, so we *have* to ensure it is safe if we 
are
> to avoid .lyx-file-as-virus problems.

Ah yes. Although in the present case $$p would be the path to the lyx file 
itself, but of course this does not prevent the security hole for 
included material.


Georg

Reply via email to