https://bugs.documentfoundation.org/show_bug.cgi?id=161893

--- Comment #4 from Werner Tietz <[email protected]> ---
(In reply to Regina Henschel from comment #3)
> There is no formal obstacle. The existing element <office:script> (3.1, part
> 3, ODF 1.3) and its attribute 'script:language' (19.434, part 3, ODF 1.3)
> would allow to embed Python scripts.

but from my observation, a file with both embedded basic *and* embedded python,
stored to **fods** … the basic-code is stored in a node like:
___
 <office:scripts>
  <office:script script:language="ooo:Basic">
   <ooo:libraries xmlns:ooo="http://openoffice.org/2004/office";
xmlns:xlink="http://www.w3.org/1999/xlink";>
    <ooo:library-embedded ooo:name="Standard">
     <ooo:module ooo:name="Module1">
      <ooo:source-code>REM  *****  BASIC  *****

Sub Main

&apos;does nothing

End Sub

      </ooo:source-code>
     </ooo:module>
    </ooo:library-embedded>
   </ooo:libraries>
  </office:script>
 </office:scripts>

___ 

but as you can see, the python code has disappeared without a trace!
see the attached file as »ods« and as »fods«

(In reply to Regina Henschel from comment #3)
> 
> I see a larger problem in the fact, that there is no UI for Python scripts
> other than to run them. From a security point of view, it should at least be
> possible to read the source of embedded scripts and to remove an embedded
> script, without the need to install an extension.

fair enough! … from my point of view there is also a security-risk to have a
~30Kloc huge project directly in the sourcecode of LO ( … ) which cannot be
disabled nor removed!

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to