Re: Lilypond as MediaWiki extension does not print in Extension:Collection

[John Mandereau]

Le jeudi 28 janvier 2010 à 15:48 +0100, Oscar van Dillen a écrit : 
> " You can install and use this extension in your wiki, but it is currently
>  not available in Wikipedia. Many people would love to use this extension
>  in Wikipedia and other large-footprint wikis that they have no control
>  over. However, in its current form, this is unfortunately impossible due
>  to security concerns.

This is not a reason not to support LilyPond processing as a option that
is switchable by a configuration file accessible only to the website
administrator, which would be disabled by default.


> is this correct, that lilypond has this "security issue" as stated;
> and is it possible " to make the program hang indefinitely"?

Adding to Kieren's example, think that LilyPond user interface is a
programming language, so it is hard to avoid these problems, that's the
workaround that consists of limiting CPU and memory usage is
recommended.  Even with normal use of such an extension, you need much
CPU power and free memory, which is surely not available on many servers
running MediaWiki.

Best,
John

signature.asc
Description: Ceci est une partie de message numériquement signée