X-Git-Url: https://git.lyx.org/gitweb/?a=blobdiff_plain;f=src%2FConverter.h;h=10f88fec8837c37e8173ee39f47216601b39517f;hb=244de5d2c10a990828eafdd72283fc87742dc133;hp=c9c44238efb8b75ce2eff3f9c11a012c8fdd5029;hpb=ff0c95aba639ab35a71f5d8ee347ecefbb9e71e1;p=features.git

diff --git a/src/Converter.h b/src/Converter.h
index c9c44238ef..10f88fec88 100644
--- a/src/Converter.h
+++ b/src/Converter.h
@@ -69,6 +69,8 @@ public:
 	bool xml() const { return xml_; }
 	///
 	bool need_aux() const { return need_aux_; }
+	/// Return whether or not the needauth option is set for this converter
+	bool need_auth() const { return need_auth_; }
 	///
 	bool nice() const { return nice_; }
 	///
@@ -77,6 +79,7 @@ public:
 	std::string const result_file() const { return result_file_; }
 	///
 	std::string const parselog() const { return parselog_; }
+
 private:
 	///
 	trivstring from_;
@@ -101,6 +104,8 @@ private:
 	bool need_aux_;
 	/// we need a "nice" file from the backend, c.f. OutputParams.nice.
 	bool nice_;
+	/// Use of this converter needs explicit user authorization
+	bool need_auth_;
 	/// If the converter put the result in a directory, then result_dir
 	/// is the name of the directory
 	trivstring result_dir_;
@@ -181,6 +186,16 @@ public:
 	const_iterator end() const { return converterlist_.end(); }
 	///
 	void buildGraph();
+
+	/// Check whether converter conv is authorized to be run for elements
+	/// within document doc_fname.
+	/// The check succeeds for safe converters, whilst for those potentially
+	/// able to execute arbitrary code, tagged with the 'needauth' option,
+	/// authorization is: always denied if lyxrc.use_converter_needauth_forbidden
+	/// is enabled; always allowed if the lyxrc.use_converter_needauth
+	/// is disabled; user is prompted otherwise
+	bool checkAuth(Converter const & conv, std::string const & doc_fname);
+
 private:
 	///
 	FormatList const
@@ -210,6 +225,8 @@ private:
 		  bool copy);
 	///
 	Graph G_;
+	/// set of document files authorized for external conversion
+	std::set<std::string> auth_files_;
 };
 
 /// The global instance.