Re: Security problem: lilypond-invoke-editor

[Stanton Sanderson]

Is this Windows-specific or is there a potential threat for other platforms?

Stan

> On Nov 23, 2017, at 6:42 AM, David Kastrup <address@hidden> wrote:
> 
> Knut Petersen <address@hidden> writes:
> 
>> Am 23.11.2017 um 10:23 schrieb David Kastrup:
>>> Stupid question: what does run-editor do to be inherently safer than
>>> run-browser, and what would prevent run-browser from doing the same?
>> 
>> Your suspicion is correct. Also textedit URIs are vulnerable to a very
>> similar attack.
> 
> It was more a hope than a suspicion: I had hoped that both could easily
> be made equivalently safe rather than equivalently unsafe.
> 
> -- 
> David Kastrup
> 
> _______________________________________________
> lilypond-user mailing list
> address@hidden
> https://lists.gnu.org/mailman/listinfo/lilypond-user