Re: Security problem: lilypond-invoke-editor

[David Kastrup]

Knut Petersen <address@hidden> writes:

> Am 23.11.2017 um 10:23 schrieb David Kastrup:
>> Stupid question: what does run-editor do to be inherently safer than
>> run-browser, and what would prevent run-browser from doing the same?
>
> Your suspicion is correct. Also textedit URIs are vulnerable to a very
> similar attack.

It was more a hope than a suspicion: I had hoped that both could easily
be made equivalently safe rather than equivalently unsafe.

-- 
David Kastrup