[dev-context] TeX on contextgarden disabled - \installprogram security

Patrick Gundlach patrick at gundla.ch
Wed Mar 28 23:06:38 CEST 2007


Hi,

I've just found out about \installprogram, that lets you run any
command from TeX, bypassing the shellescape, openout and openin
setting. This means that I have a serious security problem on
contextgarden and therefore I have disabled all TeX typesetting.

Any advise on how to disable this?

Patrick
-- 
ConTeXt wiki and more: http://contextgarden.net


More information about the dev-context mailing list