[EMAIL PROTECTED] writes:
> > (more importantly) people were concerned that there were unaddressed
> > security problems.  the request was made that the script should
> > accept only that which is permissible instead of checking for that
> > which isn't.  this meant figuring out what constituted an acceptable
> > line of mudela.  since i couldn't even think of where to begin with
> > that, the project has remained unfulfilled.
> 
> I don't profess to know much (anything) about security but surely
> lilypond would just reject the mudela if it wasn't valid. Or would this
> somehow allow somebody to gain access to the machine it was running on?

The problem is that Lilypond allows hooks in the TeX, PS and scheme code.
You could insert malicious TeX macros to wreak havoc.


-- 

Han-Wen Nienhuys, [EMAIL PROTECTED] ** GNU LilyPond - The Music Typesetter 
      http://www.cs.uu.nl/people/hanwen/lilypond/index.html 

Reply via email to