Le 29/05/2017 à 23:53, Scott Kostyshak a écrit :
It would be nice to make the process of temporarily using -shell-escape more user-friendly.[...] One solution is to add a set of converters, one for each LaTeX flavor, and then to specify the "needauth" flag for those converters.[...] Any thoughts?
It has been well explained why the needauth option is bad in terms of security, notably in messages by Helge. https://www.mail-archive.com/[email protected]/msg198111.html https://www.mail-archive.com/[email protected]/msg198123.html I did not raise issues with its inclusion because it was still an improvement compared to the situation before. But if needauth becomes an argument to include "--shell-escape" converters, it will actually have managed to make LyX less safe, I believe.
