Page MenuHomePhabricator

Translation of 'lbrack' command creates small security issue
Closed, ResolvedPublic

Description

Author: physik

Description:
see https://de.wikipedia.org/wiki/Benutzer:Physikerwelt#MOST_IMPORTANT_TEXVC_BUG
texvc translates
\lbrack->[

I guess a side effect is that it creates a tex file on the server that looks like
preamble
$$
[ user-input
$$
\end{document}
... might be a minor security issue.

I will fix that in the texvc grammar


Version: unspecified
Severity: trivial
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=49169

Details

Reference
bz54624

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 2:16 AM
bzimport added a project: Math.
bzimport set Reference to bz54624.
bzimport added a subscriber: Unknown Object (MLST).

Change 90748 had a related patch set uploaded by Physikerwelt:
Breakdown of texvc

https://gerrit.wikimedia.org/r/90748

Change 90748 merged by Physikerwelt:
Breakdown of texvc

https://gerrit.wikimedia.org/r/90748