On 03/30/2018 06:02 PM, Scott Kostyshak wrote: > On Fri, Mar 30, 2018 at 09:00:34PM +0000, John Kane wrote: >> Ah, not a bug, a feature. I guess I will learn to live with it. >> Thanks very much. It's good to know I don't have a potentially serious >> problem in my configuration. > You do not have to live with it (instructions below), but think hard > before you remove it. Have you ever downloaded and compiled a .lyx file > from the internet from a place you are not sure you could trust? It > would be extremely easy to make a .lyx file that would upload/delete all > of your files (because in R this is easy to write). And for that to > happen, all you would have to do is open the LyX file and compile it.
And, just for anyone else reading this thread: This is precisely why this new warning exists. Not just for R, but for anything that poses this kind of threat. It's our attempt to make LyX a bit more secure. Riki
