There would still be a security risk for a specific Leo file, which would need addressing, but it perhaps simplifies the problem somewhat. ---- Actually, the security risk would be higher if a Leo file could turn on @script by itself. It means that even when the global setting disallows @script, a specific Leo file could override that. Yuck!
-- You received this message because you are subscribed to the Google Groups "leo-editor" group. To unsubscribe from this group and stop receiving emails from it, send an email to leo-editor+unsubscr...@googlegroups.com. To post to this group, send email to leo-editor@googlegroups.com. Visit this group at https://groups.google.com/group/leo-editor. For more options, visit https://groups.google.com/d/optout.
