diff options
| author | John MacFarlane <jgm@berkeley.edu> | 2021-08-21 15:30:13 -0700 |
|---|---|---|
| committer | John MacFarlane <jgm@berkeley.edu> | 2021-08-28 22:31:42 -0700 |
| commit | d6d7c9620abddc5e5e45450c091bc8a73bac8f66 (patch) | |
| tree | 2dd3e01150a5611f5bb86cd08239de7f5eca3106 /SECURITY.md | |
| parent | b76796eae8ce842f8414cca8cd8e3b55be513694 (diff) | |
| download | pandoc-d6d7c9620abddc5e5e45450c091bc8a73bac8f66.tar.gz | |
Add `--sandbox` option.
+ Add sandbox feature for readers. When this option is used,
readers and writers only have access to input files (and
other files specified directly on command line). This restriction
is enforced in the type system.
+ Filters, PDF production, custom writers are unaffected. This
feature only insulates the actual readers and writers, not
the pipeline around them in Text.Pandoc.App.
+ Note that when `--sandboxed` is specified, readers won't have
access to the resource path, nor will anything have access to
the user data directory.
+ Add module Text.Pandoc.Class.Sandbox, defining
`sandbox`. Exported via Text.Pandoc.Class. [API change]
Closes #5045.
Diffstat (limited to 'SECURITY.md')
0 files changed, 0 insertions, 0 deletions