Re: Lilypond as MediaWiki extension does not print in Extension:Collection

[Oscar van Dillen]

On Thu, Jan 28, 2010 at 3:11 PM, Oscar van Dillen <address@hidden> wrote:

On Thu, Jan 28, 2010 at 1:26 PM, John Mandereau <address@hidden> wrote:

2010/1/27 Oscar van Dillen <address@hidden>:

> on my website I found that Lilypond as MediaWiki extension does not print
> music notation, just code, to the pdf in Extension:Collection
> http://www.mediawiki.org/wiki/Extension:Collection
> Lilypond does work fine when using "printable version" such as can be seen
> here http://www.oscarvandillen.com/Triad?printable=yes

> should I rather tell the collection programmers at
> http://www.mediawiki.org/wiki/Extension:Collection/Wishlist

Yes, please.  If that extension shows only the LilyPond source code of
snippets but the normal page view and the printable view show these
snippets processed and converted to PNG, it surely means that LilyPond
is not called to process these snippets from Extension:Collection.

By the way, for a decent printing quality, the PDF generation should
not be left to the user browser but should be done on the server side
(using PDF snippets generated by LilyPond), like what
openstreetmap.org does.  This regards standard printable view as well
as the extension Collection.

Best,
John

thank you very much!
with the help of your analysis, i now filed a bug to this collection, hoping it will be fixed in the near future.

it is here http://code.pediapress.com/wiki/ticket/775

very best,
oscar

--
address@hidden

www.oscarvandillen.com

hmm, as it turns out, pediapress refuses to fix this, the reasons given are:

" You can install and use this extension in your wiki, but it is currently
 not available in Wikipedia. Many people would love to use this extension
 in Wikipedia and other large-footprint wikis that they have no control
 over. However, in its current form, this is unfortunately impossible due
 to security concerns.

 This extension is using Lilypond's safe mode, which according to the
 documentation "does not detect resource overuse. It is still possible to
 make the program hang indefinitely, for example by feeding cyclic data
 structures into the backend. Therefore, if using LilyPond on a publicly
 accessible webserver, the process should be limited in both CPU and memory
 usage." This extension is therefore not used in Wikipedia because it is
 considered a hazardous denial-of-service vector."

is this correct, that lilypond has this "security issue" as stated; and is it possible " to make the program hang indefinitely"?

thanks in advance and all the best,
oscar

-- 
address@hidden

www.oscarvandillen.com

******************
The information contained in this message is confidential and may be legally privileged. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, dissemination, or reproduction is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
Although this message and any attachments are believed to be free of viruses, no responsibility can be accepted for any loss or damage arising in any way from receipt or use thereof.  
******************