Re: Going into dangerous mode (Was: Can shell-escape take advantage of needauth framework?)

Le 21/07/2017 à 21:02, Scott Kostyshak a écrit : except if I disable needauth globally :( What about editing the session file to add the paths of the .lyx files that you want? If you're interested, I could write a Python/Bash script that does it for you. I might end up using it also. Well, I

Re: Errors with vref on de/Additional.lyx with lualatex

Am Freitag, 21. Juli 2017 um 22:08:48, schrieb Guenter Milde > On 2017-07-20, Kornel Benko wrote: > > Am Mittwoch, 19. Juli 2017 um 22:23:32, schrieb Kornel Benko > > > >> Am Mittwoch, 19. Juli 2017 um 19:48:49, schrieb Guenter Milde > >>

Re: Going into dangerous mode (Was: Can shell-escape take advantage of needauth framework?)

On 2017-07-19, Richard Heck wrote: > On 07/19/2017 01:48 AM, Christian Ridderström wrote: >> On 18 July 2017 at 23:49, Jean-Marc Lasgouttes > > wrote: >> Le 18/07/2017 à 23:42, Christian Ridderström a écrit : >> I think the default

Re: Errors with vref on de/Additional.lyx with lualatex

Am Freitag, 21. Juli 2017 um 21:30:35, schrieb Guenter Milde > On 2017-07-19, Kornel Benko wrote: > > > > > I did as you proposed (Dejavu font), but maybe you are unaware that > > With TL15 everything compiles here > > TL15 does not bind \textcompwordmark to the ZWNJ

Re: [LyX/master] Preferences shows current zoom instead of preference's default zoom (#10455)

On Tue, Jul 18, 2017 at 04:43:44AM -0400, Scott Kostyshak wrote: > On Sun, May 07, 2017 at 02:18:41PM +0200, Guillaume MM wrote: > > commit 4183a9f4dc9bc0893fc59cd7e31db9bc7e52eea9 > > Author: Daniel Ramöller > > Date: Sat Oct 29 10:28:34 2016 +0200 > > > > Preferences shows

Re: export tests for beamer with TL17

Am Freitag, 21. Juli 2017 um 21:08:48, schrieb Guenter Milde > On 2017-07-21, Kornel Benko wrote: > > > OK, instead of \usepackage{fix-cm} > > the entry \usepackage{lmodern} > > works too. At least for pdflatex. > > This also cures the use of dead ugly bitmapped EC fonts

Re: Any descriptions of the security aspects (related to needauth and shell-escape)?

On Sat, Jul 22, 2017 at 12:22:21AM +0200, Enrico Forestieri wrote: > > I think the above summaries by Richard and Guillaume are accurate. > > Please, note that I did not even think about adding support for shell > escape for the sake of minted. In my view, the minted support was ready > as it is

Re: Any descriptions of the security aspects (related to needauth and shell-escape)?

On Fri, Jul 21, 2017 at 04:29:04PM -0400, Scott Kostyshak wrote: > On Thu, Jul 20, 2017 at 07:04:56PM +0200, Guillaume MM wrote: > > Le 19/07/2017 à 16:59, Richard Heck a écrit : > > > On 07/19/2017 02:22 AM, Christian Ridderström wrote: > > > > Hi, > > > > > > > > When having tried to

Re: Errors with vref on de/Additional.lyx with lualatex

On 2017-07-20, Kornel Benko wrote: > Am Mittwoch, 19. Juli 2017 um 22:23:32, schrieb Kornel Benko >> Am Mittwoch, 19. Juli 2017 um 19:48:49, schrieb Guenter Milde >> >> > On 2017-07-19, Kornel Benko wrote: >> > >> > > [-- Type: text/plain, Encoding: 7bit --]

Re: Errors with vref on de/Additional.lyx with lualatex

On 2017-07-19, Kornel Benko wrote: > I did as you proposed (Dejavu font), but maybe you are unaware that > With TL15 everything compiles here TL15 does not bind \textcompwordmark to the ZWNJ character but uses the default definition also for Unicode fonts (EC1 and EC2). > With TL16 I get

Re: export tests for beamer with TL17

On 2017-07-21, Kornel Benko wrote: > OK, instead of \usepackage{fix-cm} > the entry \usepackage{lmodern} > works too. At least for pdflatex. This also cures the use of dead ugly bitmapped EC fonts auto-substituted for the default CM because LyX sets the font encoding to T1! Please change the

Re: Different LaTeX output when exporting than when previewing

On 2017-07-21, Scott Kostyshak wrote: > On Tue, Jul 18, 2017 at 08:00:36AM +, Guenter Milde wrote: >> On 2017-07-03, Scott Kostyshak wrote: >> > On Mon, Jul 03, 2017 at 03:02:31PM +0200, Jean-Marc Lasgouttes wrote: >> >> Le 29/05/2017 à 18:06, Scott Kostyshak a écrit : >> >> > If I do the

Re: [LyX/master] We have new translation which slipped through the cracks.

Le 19/07/2017 à 13:51, Pavel Sanda a écrit : Pavel Sanda wrote: commit cd7b1dad6713e0dba2b90e7757fce5b0ca8e Author: Pavel Sanda Date: Wed Jul 19 13:36:06 2017 +0200 We have new translation which slipped through the cracks. Scott, I am sorry I did not catch that

Re: Any descriptions of the security aspects (related to needauth and shell-escape)?

On Thu, Jul 20, 2017 at 07:04:56PM +0200, Guillaume MM wrote: > Le 19/07/2017 à 16:59, Richard Heck a écrit : > > On 07/19/2017 02:22 AM, Christian Ridderström wrote: > > > Hi, > > > > > > When having tried to contribute to the discussion on needauth and > > > shell-escape I've felt that it's

Re: Any descriptions of the security aspects (related to needauth and shell-escape)?

On Wed, Jul 19, 2017 at 07:34:59PM +, Guenter Milde wrote: > On 2017-07-19, Christian Ridderström wrote: > > ... > > ... I would like to ask (not being > > optimistic), if there's some design description anywhere? > > > I wonder because IMHO security requires a system wide approach and that

Re: Can shell-escape take advantage of needauth framework?

On Tue, Jul 18, 2017 at 11:21:38AM +0200, Jean-Marc Lasgouttes wrote: > Le 18/07/2017 à 09:07, Scott Kostyshak a écrit : > > I was thinking about it from a different angle. I was only focused on > > what I thought was most secure, without even considering usability. As I > > mentioned in the

Re: [LyX/master] Overtake layout translations from fi.po, ja.po, zh_CN.po

Wed, 19 Jul 2017 13:41:17 +0200 Pavel Sanda wrote: > Pavel Sanda wrote: > > Hi, > > thanks, for the clarifications! > > > > I see you removed the "luettelo" parts which is supposedly "List" > > in your language. Are you sure about that change? Yes, the common convention is not

Re: Can shell-escape take advantage of needauth framework?

On Wed, Jul 19, 2017 at 11:06:54AM +0200, Pavel Sanda wrote: > and > if the argument really is that I can trick someone into unchecking > whatever I want, then I can directly trick him into writing rm -rf / > on the commandline. Good point. I guess we try to limit the number of ways a user can

Re: Can shell-escape take advantage of needauth framework?

On Tue, Jul 18, 2017 at 11:32:24AM +0200, Guillaume MM wrote: > I agree, but note that for printing this did not invalidate existing > documents. True that's indeed an important difference. Scott signature.asc Description: PGP signature

Re: Going into dangerous mode (Was: Can shell-escape take advantage of needauth framework?)

On Wed, Jul 19, 2017 at 12:00:52PM +0200, Jean-Marc Lasgouttes wrote: > Which make me think that I did not try to check whether my nice scripts to > process Sweave lyx file still have a chance to work. Oops! they won't This is good. It shows the needauth implementation works. > except if I

Re: Different LaTeX output when exporting than when previewing

On Tue, Jul 18, 2017 at 08:00:36AM +, Guenter Milde wrote: > On 2017-07-03, Scott Kostyshak wrote: > > On Mon, Jul 03, 2017 at 03:02:31PM +0200, Jean-Marc Lasgouttes wrote: > >> Le 29/05/2017 à 18:06, Scott Kostyshak a écrit : > >> > If I do the above several times, I eventually get: > >> >

Re: [LyX/master] We have new translation which slipped through the cracks.

On Wed, Jul 19, 2017 at 01:51:55PM +0200, Pavel Sanda wrote: > Pavel Sanda wrote: > > commit cd7b1dad6713e0dba2b90e7757fce5b0ca8e > > Author: Pavel Sanda > > Date: Wed Jul 19 13:36:06 2017 +0200 > > > > We have new translation which slipped through the cracks. > >

Re: export tests for beamer with TL17

Am Freitag, 21. Juli 2017 um 15:48:25, schrieb Kornel Benko > Am Freitag, 21. Juli 2017 um 15:37:05, schrieb Jürgen Spitzmüller > > > Am Freitag, den 21.07.2017, 13:58 +0200 schrieb Kornel Benko: > > > The working cure for this lyx-file is to insert

Re: export tests for beamer with TL17

Am Freitag, 21. Juli 2017 um 15:37:05, schrieb Jürgen Spitzmüller > Am Freitag, den 21.07.2017, 13:58 +0200 schrieb Kornel Benko: > > The working cure for this lyx-file is to insert '\usepackage{fix-cm}' > > into the preamble. > > There are also other workarounds. See >

Re: export tests for beamer with TL17

Am Freitag, den 21.07.2017, 13:58 +0200 schrieb Kornel Benko: > The working cure for this lyx-file is to insert '\usepackage{fix-cm}' > into the preamble. There are also other workarounds. See http://texblog.net/latex-archive/latex-general/beamer-warnings/ Jürgen signature.asc Description:

Re: export tests for beamer with TL17

Am Freitag, 21. Juli 2017 um 15:04:58, schrieb Kornel Benko > Am Freitag, 21. Juli 2017 um 13:58:49, schrieb Kornel Benko > > The working cure for this lyx-file is to insert '\usepackage{fix-cm}' into > > the preamble. > > Hm, according to documentation of

Re: export tests for beamer with TL17

Le 21/07/2017 à 15:04, Kornel Benko a écrit : Am Freitag, 21. Juli 2017 um 13:58:49, schrieb Kornel Benko The working cure for this lyx-file is to insert '\usepackage{fix-cm}' into the preamble. Interesting we already have the feature, so it is sufficient to add module

Re: export tests for beamer with TL17

Am Freitag, 21. Juli 2017 um 13:58:49, schrieb Kornel Benko > The working cure for this lyx-file is to insert '\usepackage{fix-cm}' into > the preamble. Hm, according to documentation of fix-cm, the tex source should start with \RequirePackage{fix-cm} before

export tests for beamer with TL17

Hi, these tests fail with TL17 (because of missing ecss0400.tfm) 3284:DEFAULTOUTPUT_export/examples/beamer_pdf2 3291:export/examples/beamerlyxexample1_dvi 3294:export/examples/beamerlyxexample1_pdf 3295:export/examples/beamerlyxexample1_pdf2 3296:export/examples/beamerlyxexample1_pdf3