[prev in list] [next in list] [prev in thread] [next in thread] 

List:       lyx-users
Subject:    Re: LyX--Knitr warnings.
From:       Richard Kimberly Heck <rikiheck () lyx ! org>
Date:       2018-03-31 16:29:12
Message-ID: 1bf5805b-3752-2061-b446-2b6ba92bc112 () lyx ! org
[Download RAW message or body]

On 03/30/2018 06:02 PM, Scott Kostyshak wrote:
> On Fri, Mar 30, 2018 at 09:00:34PM +0000, John Kane wrote:
>> Ah, not a bug, a feature. I guess I will learn to live with it.
>> Thanks very much. It's good to know I don't have a potentially serious
>> problem in my configuration.
> You do not have to live with it (instructions below), but think hard
> before you remove it. Have you ever downloaded and compiled a .lyx file
> from the internet from a place you are not sure you could trust? It
> would be extremely easy to make a .lyx file that would upload/delete all
> of your files (because in R this is easy to write). And for that to
> happen, all you would have to do is open the LyX file and compile it.

And, just for anyone else reading this thread: This is precisely why
this new warning exists.
Not just for R, but for anything that poses this kind of threat. It's
our attempt to make LyX a
bit more secure.

Riki

[prev in list] [next in list] [prev in thread] [next in thread]