Policy for opening url links in documents

[Pavel Sanda]

On Wed, Aug 16, 2023 at 05:30:56PM -0400, Richard Kimberly Heck wrote:
> >Now what are your opinions what we should do about it?
> >1) nothing.
> >2) add dialog before launching url. safer but super annoying.
> >3) add dialog before launching url + dont ask again checkbox.
> >    not implemented - we'll also need to add session keys, which
> >    get erased often.
> >4) add link target to context menu (non trivial to implement)
> >5) add (by default disabled) checkbox in security preference to allow
> >    opening links for citations and hyperlinks similarly as we do with
> >    scripts.
> >6) ?
> >
> >I tend to go for 5, but there might be other options I did not think of...
> 
> I'm always quite paranoid about this. I suppose (5) is OK if people know
> what they're doing. Could we combine (3) and (5)? If we only have (5), then
> people might not discover this functionality.

If discoverability is a problem in the case of 5, we might simply let
the item in context menu visible, but disabled, so people get curious...

> But perhaps in the dialog we could say something like, "If you want to
> disable this warning, see Tools> Preferences> Whatever".

So you propose two RCs - one for 5) and one for disabling 3)?

Pavel