You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Nice project! Added to pandoc wiki
I was happy to discover you already allow pandoc syntax extensions e.g. text/markdown_github-blank_before_header+tex_math_dollars+tex_math_single_backslash :-)
But many aspects of pandoc's input and output are not covered by "from" and "to" formats, so I'd like to also be able to pass extra command-line options.
Allowing arbitrary command line options is probably unsafe (multiple ways to read local files like /etc/passwd, filters might allow remote code execution...).
I don't see an easy way to know what's secure, except by whitelist (to be extended by PRs when people want more).
And instead of trying to parse a given command line, it's simpler to accept structured options (e.g. {standalone: true} or &standalone=true) and generate a command line.
=> All this leads to inventing yet another complex pandoc API, that won't 1:1 match other pandoc service APIs... Oh well. Prior arts: http://www.docverter.com/api#Full-Option-Reference, http://yihui.name/knitr/demo/pandoc/ (see Config File), https://github.com/alphabetum/pandoc-ruby#usage
The text was updated successfully, but these errors were encountered:
Nice project! Added to pandoc wiki
I was happy to discover you already allow pandoc syntax extensions e.g.
text/markdown_github-blank_before_header+tex_math_dollars+tex_math_single_backslash
:-)But many aspects of pandoc's input and output are not covered by "from" and "to" formats, so I'd like to also be able to pass extra command-line options.
Allowing arbitrary command line options is probably unsafe (multiple ways to read local files like /etc/passwd, filters might allow remote code execution...).
I don't see an easy way to know what's secure, except by whitelist (to be extended by PRs when people want more).
And instead of trying to parse a given command line, it's simpler to accept structured options (e.g.
{standalone: true}
or&standalone=true
) and generate a command line.=> All this leads to inventing yet another complex pandoc API, that won't 1:1 match other pandoc service APIs... Oh well. Prior arts: http://www.docverter.com/api#Full-Option-Reference, http://yihui.name/knitr/demo/pandoc/ (see Config File), https://github.com/alphabetum/pandoc-ruby#usage
The text was updated successfully, but these errors were encountered: