latex2rtf-users

[Prev] Thread [Next]  |  [Prev] Date [Next]

[Latex2rtf-users] Online RTF generation - can I disable IO? Fergus Gallagher Wed Dec 10 07:00:56 2008

I want to use latex2rtf to generate an online RTF version of user-supplied
data (specifically bibtex data) but I can't find a way to ensure that a user
can't get away with things like "\input /etc/passwd" in an entry.

Actually, I do this:

        \begin{thebibliography}{xx}
        \let\input\relax
        \let\openin\relax
        \let\openout\relax
        \let\import\relax
        \let\include\relax
        \let\catcode\relax

which seems to work but I'm not happy that a clever TeXhacker couldn't find
a way around that.

Regular TeX allows a few flags in texmf.cnf (shell_escape=f, openout_any=p
openin_any=p) which seem, on paper at least, to do the job.

Are there similar options in latex2rtf?

Regards,

-- 
Fergus Gallagher

"The problem with people who have no vices is that generally you can be
pretty sure they're going to have some pretty annoying virtues." -
Elizabeth Taylor

------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
Latex2rtf-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/latex2rtf-users