From: Denis B. <dbi...@wa...> - 2012-06-08 13:30:22
|
Hi, in some cases (less and less rare), it is required to run (pdf|xe|lua)(la)tex with --shell-escape option (\write18, auto-pst-pdf, etc.) It could be nice to add the ability for the user to easily compile with this option but, as it is potentially dangerous, he should be warned to run with this option only with .tex files he trusts. -- Denis |
From: Benito v. d. Z. <be...@be...> - 2012-06-08 13:36:05
|
You can put something like % !TeX TXS-program:compile = txs:///pdflatex --shell-escape in the document On 06/08/12 15:30, Denis Bitouzé wrote: > Hi, > > in some cases (less and less rare), it is required to run > (pdf|xe|lua)(la)tex with --shell-escape option (\write18, > auto-pst-pdf, etc.) > > It could be nice to add the ability for the user to easily compile with > this option but, as it is potentially dangerous, he should be warned to > run with this option only with .tex files he trusts. |
From: Denis B. <dbi...@wa...> - 2012-06-08 13:50:14
|
Le vendredi 08/06/12 à 15h39, Benito van der Zander <be...@be...> a écrit : > You can put something like > > % !TeX TXS-program:compile = txs:///pdflatex --shell-escape > > in the document OK, but the idea is to help the user (especially the beginner): those magic comments that are nice, but add another difficulty for most of the users. Suppose an average user, familiar with TXS, who reads some documentation where it is written to run (PDF)LaTeX with this option, option that he never has been told earlier. I'm not sure he would be able to find the magic comment trick easily. -- Denis |
From: Denis B. <dbi...@wa...> - 2012-12-10 17:26:20
|
Le vendredi 08/06/12 à 15h39, Benito van der Zander <be...@be...> a écrit : > You can put something like > > % !TeX TXS-program:compile = txs:///pdflatex --shell-escape > > in the document > > On 06/08/12 15:30, Denis Bitouzé wrote: > > Hi, > > > > in some cases (less and less rare), it is required to run > > (pdf|xe|lua)(la)tex with --shell-escape option (\write18, > > auto-pst-pdf, etc.) > > > > It could be nice to add the ability for the user to easily compile > > with this option but, as it is potentially dangerous, he should be > > warned to run with this option only with .tex files he trusts. Sorry to reactivate this question but the previous magic comment doesn't work because it runs: pdflatex -synctex=1 -interaction=nonstopmode %.tex --shell-escape which ignores the "--shell-escape" option. In order to be taken in account, this option should be before "%.tex". As I said on 8 Jun 2012 15:50, a less tricky way to activate this option could be nice, especially for beginners: "Suppose an average user, familiar with TXS, who reads some documentation where it is written to run (PDF)LaTeX with this option, option that he never has been told earlier. I'm not sure he would be able to find the magic comment trick easily." Nevertheless, the current dialog box which asks: The document %1 want to override the command %2 with %3. Do you trust this document? is necessary. But please note that: 1. the typo: "want" -> "wants", 2. the previous magic comment leads to the strange message: The document ... want to override the command compile with ... IMO, "compile" is meaningless, 3. the three buttons in this dialog box are not large enough to contain their texts, especially in French, but in English as well. -- Denis |
From: Benito v. d. Z. <be...@be...> - 2012-12-10 18:22:52
|
> Sorry to reactivate this question but the previous magic comment > doesn't work because it runs: > > pdflatex -synctex=1 -interaction=nonstopmode %.tex --shell-escape > > which ignores the "--shell-escape" option. In order to be taken in > account, this option should be before "%.tex". Strange. But there is also an option for the other side: % !TeX TXS-program:compile = txs:///pdflatex/[--shell-escape] > 1. the typo: "want" -> "wants", ok > 2. the previous magic comment leads to the strange message: > > The document ... want to override the command compile with ... > > IMO, "compile" is meaningless, Perhaps replace it by ... override the command "compile" with ... But it has to say "compile" there, since the document can also override other commands. E.g. "view" to view the document with pdflatex (as if that makes any sense), or quick to only run pdflatex and no view at all if f1 is pressed > 3. the three buttons in this dialog box are not large enough to > contain their texts, especially in French, but in English as well. On which system? Here, with qt4.8 on linux, it works fine Benito On 12/10/2012 06:26 PM, Denis Bitouzé wrote: > Le vendredi 08/06/12 à 15h39, > Benito van der Zander<be...@be...> a écrit : > >> You can put something like >> >> % !TeX TXS-program:compile = txs:///pdflatex --shell-escape >> >> in the document >> >> On 06/08/12 15:30, Denis Bitouzé wrote: >>> Hi, >>> >>> in some cases (less and less rare), it is required to run >>> (pdf|xe|lua)(la)tex with --shell-escape option (\write18, >>> auto-pst-pdf, etc.) >>> >>> It could be nice to add the ability for the user to easily compile >>> with this option but, as it is potentially dangerous, he should be >>> warned to run with this option only with .tex files he trusts. > Sorry to reactivate this question but the previous magic comment > doesn't work because it runs: > > pdflatex -synctex=1 -interaction=nonstopmode %.tex --shell-escape > > which ignores the "--shell-escape" option. In order to be taken in > account, this option should be before "%.tex". > > As I said on 8 Jun 2012 15:50, a less tricky way to activate this option > could be nice, especially for beginners: > > "Suppose an average user, familiar with TXS, who reads some > documentation where it is written to run (PDF)LaTeX with this option, > option that he never has been told earlier. I'm not sure he would be > able to find the magic comment trick easily." > > Nevertheless, the current dialog box which asks: > > The document %1 want to override the command %2 with %3. > Do you trust this document? > > is necessary. But please note that: > > 1. the typo: "want" -> "wants", > > 2. the previous magic comment leads to the strange message: > > The document ... want to override the command compile with ... > > IMO, "compile" is meaningless, > > 3. the three buttons in this dialog box are not large enough to > contain their texts, especially in French, but in English as well. |
From: Denis B. <dbi...@wa...> - 2012-12-10 18:47:25
|
Le lundi 10/12/12 à 19h28, Benito van der Zander <be...@be...> a écrit : > > Sorry to reactivate this question but the previous magic comment > > doesn't work because it runs: > > > > pdflatex -synctex=1 -interaction=nonstopmode %.tex --shell-escape > > > > which ignores the "--shell-escape" option. In order to be taken in > > account, this option should be before "%.tex". > Strange. > > But there is also an option for the other side: > > > % !TeX TXS-program:compile = txs:///pdflatex/[--shell-escape] Works like a charm: thanks! > > 1. the typo: "want" -> "wants", > ok > > 2. the previous magic comment leads to the strange message: > > > > The document ... want to override the command compile > > with ... > > > > IMO, "compile" is meaningless, > Perhaps replace it by ... override the command "compile" with ... A bit better, yes. > But it has to say "compile" there, since the document can also > override other commands. > E.g. "view" to view the document with pdflatex (as if that makes any > sense), or quick to only run pdflatex and no view at all if f1 is > pressed OK. > > 3. the three buttons in this dialog box are not large enough to > > contain their texts, especially in French, but in English as > > well. > On which system? > > Here, with qt4.8 on linux, it works fine Same config here but see: http://gte.univ-littoral.fr/members/dbitouze/pub/latex/texstudio/too-small-buttons/downloadFile/file/txs.png -- Denis |
From: Denis B. <dbi...@wa...> - 2012-12-10 21:00:33
|
Le lundi 10/12/12 à 19h47, Denis Bitouzé <dbi...@wa...> a écrit : > > > 3. the three buttons in this dialog box are not large enough to > > > contain their texts, especially in French, but in English as > > > well. > > On which system? > > > > Here, with qt4.8 on linux, it works fine > > Same config here but see: > > http://gte.univ-littoral.fr/members/dbitouze/pub/latex/texstudio/too-small-buttons/downloadFile/file/txs.png BTW, if I'm right, the button caption "Yes, always run the overridden command" means in fact "Yes, always run the overridden command for this document" and this should be added, even if it is after the question "Do you trust this document?". In fact, the buttons: 1. "Yes, always run the overridden command" 2. "Yes, allow all documents to use the overridden command" 3. "No, run the default command" doesn't actually answer the question "Do you trust this document?". And, if I'm right, the 2nd button should be "Yes, allow the overridden command to be used for all documents". Finally, I suggest something like the following. 1. Warning and question: "The document %1 wants to override the command %2 with %3. What do you want to do (read carefully before choosing!)?" 2. Answers and warnings: (a) "Always run the overridden command on this document" (only if you trust this document!) (b) "Allow the overridden command to be used for all documents" (only if you trust all documents: should be avoided!) (c) "Don't use the command %3 and run the default one" -- Denis |
From: Benito v. d. Z. <be...@be...> - 2012-12-10 22:36:19
|
> BTW, if I'm right, the button caption "Yes, always run the overridden > command" means in fact "Yes, always run the overridden command for this > document" and this should be added, even if it is after the question > "Do you trust this document?". Yes. > doesn't actually answer the question "Do you trust this document?". Well, you need to trust this document, to allow it to run a custom command or to allow it to add a command to the allowed list for all documents... > Finally, I suggest something like the following. > > 1. Warning and question: > > "The document %1 wants to override the command %2 with %3. What do > you want to do (read carefully before choosing!)?" > > 2. Answers and warnings: > > (a) "Always run the overridden command on this document" (only if you > trust this document!) > > (b) "Allow the overridden command to be used for all documents" (only > if you trust all documents: should be avoided!) > > (c) "Don't use the command %3 and run the default one" Isn't that way to long to fit on the buttons? Or do you mean to put it in the message text, and just label the buttons a/b/c > (only > if you trust all documents: should be avoided!) It should not be always avoided. It is not always shell-escape, it could be a harmless command (e.g. run asymptote before compiling, use latex instead pdflatex, convert eps to pdf...) Benito On 12/10/2012 10:00 PM, Denis Bitouzé wrote: > Le lundi 10/12/12 à 19h47, > Denis Bitouzé<dbi...@wa...> a écrit : > >>>> 3. the three buttons in this dialog box are not large enough to >>>> contain their texts, especially in French, but in English as >>>> well. >>> On which system? >>> >>> Here, with qt4.8 on linux, it works fine >> Same config here but see: >> >> http://gte.univ-littoral.fr/members/dbitouze/pub/latex/texstudio/too-small-buttons/downloadFile/file/txs.png > BTW, if I'm right, the button caption "Yes, always run the overridden > command" means in fact "Yes, always run the overridden command for this > document" and this should be added, even if it is after the question > "Do you trust this document?". > > In fact, the buttons: > > 1. "Yes, always run the overridden command" > > 2. "Yes, allow all documents to use the overridden command" > > 3. "No, run the default command" > > doesn't actually answer the question "Do you trust this document?". > > And, if I'm right, the 2nd button should be "Yes, allow the overridden > command to be used for all documents". > > Finally, I suggest something like the following. > > 1. Warning and question: > > "The document %1 wants to override the command %2 with %3. What do > you want to do (read carefully before choosing!)?" > > 2. Answers and warnings: > > (a) "Always run the overridden command on this document" (only if you > trust this document!) > > (b) "Allow the overridden command to be used for all documents" (only > if you trust all documents: should be avoided!) > > (c) "Don't use the command %3 and run the default one" |
From: Denis B. <dbi...@wa...> - 2012-12-11 10:33:01
|
Le lundi 10/12/12 à 23h42, Benito van der Zander <be...@be...> a écrit : > > doesn't actually answer the question "Do you trust this > > document?". > Well, you need to trust this document, to allow it to run a custom > command or to allow it to add a command to the allowed list for all > documents... But if the question is "Do you trust this document?", the answer should be "Yes", "No" or, at a pinch, "More or less" :) not "I want to run the command contained in one of magic comments of this document for either just this document or for all documents or for any document". In fact, I should say more: what we are asked is if we trust the command, not the document, hence: > > Finally, I suggest something like the following. > > > > 1. Warning and question: > > > > "The document %1 wants to override the command %2 with %3. > > What do you want to do (read carefully before choosing!)?" > > > > 2. Answers and warnings: > > > > (a) "Always run the overridden command on this document" (only > > if you trust this document!) if you trust this document! -> if you trust this command! > > (b) "Allow the overridden command to be used for all > > documents" (only if you trust all documents: should be avoided!) if you trust all documents -> if you actually want to run this command for all your documents (!) > > (c) "Don't use the command %3 and run the default one" > > Isn't that way to long to fit on the buttons? Indeed. > Or do you mean to put it in the message text, and just label the > buttons a/b/c Yes. > > (only if you trust all documents: should be avoided!) > It should not be always avoided. > It is not always shell-escape, it could be a harmless command (e.g. > run asymptote before compiling, use latex instead pdflatex, convert > eps to pdf...) Maybe harm options like shell-escape should be detected and treated in a special way with appropriate warnings. But anyway, it looks strange for me to decide at some point to run a given command for all (even future) documents: at least, there should be a simple way to revert the decision. -- Denis |
From: Benito v. d. Z. <be...@be...> - 2013-01-25 01:10:53
|
> Or do you mean to put it in the message text, and just label the > buttons a/b/c changed it like this On 12/11/2012 08:30 AM, Denis Bitouzé wrote: > Le lundi 10/12/12 à 23h42, > Benito van der Zander<be...@be...> a écrit : > >>> doesn't actually answer the question "Do you trust this >>> document?". >> Well, you need to trust this document, to allow it to run a custom >> command or to allow it to add a command to the allowed list for all >> documents... > But if the question is "Do you trust this document?", the answer should > be "Yes", "No" or, at a pinch, "More or less" :) not "I want to run the > command contained in one of magic comments of this document for either > just this document or for all documents or for any document". > > In fact, I should say more: what we are asked is if we trust the > command, not the document, hence: > >>> Finally, I suggest something like the following. >>> >>> 1. Warning and question: >>> >>> "The document %1 wants to override the command %2 with %3. >>> What do you want to do (read carefully before choosing!)?" >>> >>> 2. Answers and warnings: >>> >>> (a) "Always run the overridden command on this document" (only >>> if you trust this document!) > if you trust this document! -> if you trust this command! > >>> (b) "Allow the overridden command to be used for all >>> documents" (only if you trust all documents: should be avoided!) > if you trust all documents -> if you actually want to run this command > for all your documents (!) > >>> (c) "Don't use the command %3 and run the default one" >> Isn't that way to long to fit on the buttons? > Indeed. > >> Or do you mean to put it in the message text, and just label the >> buttons a/b/c > Yes. > >>> (only if you trust all documents: should be avoided!) >> It should not be always avoided. >> It is not always shell-escape, it could be a harmless command (e.g. >> run asymptote before compiling, use latex instead pdflatex, convert >> eps to pdf...) > Maybe harm options like shell-escape should be detected and treated in > a special way with appropriate warnings. But anyway, it looks strange > for me to decide at some point to run a given command for all (even > future) documents: at least, there should be a simple way to revert the > decision. |
From: Denis B. <dbi...@wa...> - 2013-01-28 21:16:08
|
Le vendredi 25/01/13 à 02h17, Benito van der Zander <be...@be...> a écrit : > > Or do you mean to put it in the message text, and just label the > > buttons a/b/c > > changed it like this OK, thanks. Two remarks: 1. The question is "Do you want to allow and run the new, overriding command?" so the answers should start by "Yes" or "No". Hence I suggest answers to be: (a) Yes, allow the new command to be used but only for this document (only if you trust this document) (b) Yes, allow the new command to be used and this for all documents (only if you trust the new command to handle arbitrary documents) (c) No, don't use the command "%3" and run the default "%2" command 2. Suppose the user clicks on (a) or (b), and later change his mind (may be critical with (b)): how could he revert his choice? -- Denis |
From: Benito v. d. Z. <be...@be...> - 2013-01-30 21:11:25
|
> Hence I suggest > answers to be: Changed.. Except the "..and this...", that sounds so strangely > 2. Suppose the user clicks on (a) or (b), and later change his mind > (may be critical with (b)): how could he revert his choice? Well, he would have to edit the ini... Benito On 01/28/2013 10:16 PM, Denis Bitouzé wrote: > Le vendredi 25/01/13 à 02h17, > Benito van der Zander<be...@be...> a écrit : > >>> Or do you mean to put it in the message text, and just label the >>> buttons a/b/c >> changed it like this > OK, thanks. Two remarks: > > 1. The question is "Do you want to allow and run the new, overriding > command?" so the answers should start by "Yes" or "No". Hence I suggest > answers to be: > > (a) Yes, allow the new command to be used but only for this document > (only if you trust this document) > > (b) Yes, allow the new command to be used and this for all documents > (only if you trust the new command to handle arbitrary documents) > > (c) No, don't use the command "%3" and run the default "%2" command > > 2. Suppose the user clicks on (a) or (b), and later change his mind > (may be critical with (b)): how could he revert his choice? |
From: Denis B. <dbi...@wa...> - 2013-01-31 07:15:44
|
Le mercredi 30/01/13 à 22h17, Benito van der Zander <be...@be...> a écrit : > Changed.. > > Except the "..and this...", that sounds so strangely Yes, probably so typically French ;) > > 2. Suppose the user clicks on (a) or (b), and later change his mind > > (may be critical with (b)): how could he revert his choice? > Well, he would have to edit the ini... Such a setting opens a critical security hole so it should be more easily reversible, i.e. somewhere in Options -> Configure TXS. -- Denis |