On Thu, Jan 28, 2010 at 3:11 PM, Oscar van Dillen <oscarvandil...@gmail.com>wrote:
> > > On Thu, Jan 28, 2010 at 1:26 PM, John Mandereau > <john.mander...@gmail.com>wrote: > >> 2010/1/27 Oscar van Dillen <oscarvandil...@gmail.com>: >> > on my website I found that Lilypond as MediaWiki extension does not >> print >> > music notation, just code, to the pdf in Extension:Collection >> > http://www.mediawiki.org/wiki/Extension:Collection >> > Lilypond does work fine when using "printable version" such as can be >> seen >> > here http://www.oscarvandillen.com/Triad?printable=yes >> >> > should I rather tell the collection programmers at >> > http://www.mediawiki.org/wiki/Extension:Collection/Wishlist >> >> Yes, please. If that extension shows only the LilyPond source code of >> snippets but the normal page view and the printable view show these >> snippets processed and converted to PNG, it surely means that LilyPond >> is not called to process these snippets from Extension:Collection. >> >> By the way, for a decent printing quality, the PDF generation should >> not be left to the user browser but should be done on the server side >> (using PDF snippets generated by LilyPond), like what >> openstreetmap.org does. This regards standard printable view as well >> as the extension Collection. >> >> Best, >> John >> > > thank you very much! > with the help of your analysis, i now filed a bug to this collection, > hoping it will be fixed in the near future. > > it is here http://code.pediapress.com/wiki/ticket/775 > > > very best, > oscar > > -- > oscarvandil...@gmail.com > > www.oscarvandillen.com > > hmm, as it turns out, pediapress refuses to fix this, the reasons given are: " You can install and use this extension in your wiki, but it is currently not available in Wikipedia. Many people would love to use this extension in Wikipedia and other large-footprint wikis that they have no control over. However, in its current form, this is unfortunately impossible due to security concerns. This extension is using Lilypond's safe mode, which according to the documentation "does not detect resource overuse. It is still possible to make the program hang indefinitely, for example by feeding cyclic data structures into the backend. Therefore, if using LilyPond on a publicly accessible webserver, the process should be limited in both CPU and memory usage." This extension is therefore not used in Wikipedia because it is considered a hazardous denial-of-service vector." is this correct, that lilypond has this "security issue" as stated; and is it possible " to make the program hang indefinitely"? thanks in advance and all the best, oscar -- oscarvandil...@gmail.com www.oscarvandillen.com ****************** The information contained in this message is confidential and may be legally privileged. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, dissemination, or reproduction is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message. Although this message and any attachments are believed to be free of viruses, no responsibility can be accepted for any loss or damage arising in any way from receipt or use thereof. ******************
_______________________________________________ lilypond-user mailing list lilypond-user@gnu.org http://lists.gnu.org/mailman/listinfo/lilypond-user