Policy for opening url links in documents

[Richard Kimberly Heck]

On 8/16/23 18:29, Pavel Sanda wrote:
> On Wed, Aug 16, 2023 at 05:30:56PM -0400, Richard Kimberly Heck wrote:
>>> Now what are your opinions what we should do about it?
>>> 1) nothing.
>>> 2) add dialog before launching url. safer but super annoying.
>>> 3) add dialog before launching url + dont ask again checkbox.
>>>     not implemented - we'll also need to add session keys, which
>>>     get erased often.
>>> 4) add link target to context menu (non trivial to implement)
>>> 5) add (by default disabled) checkbox in security preference to allow
>>>     opening links for citations and hyperlinks similarly as we do with
>>>     scripts.
>>> 6) ?
>>>
>>> I tend to go for 5, but there might be other options I did not think of...
>> I'm always quite paranoid about this. I suppose (5) is OK if people know
>> what they're doing. Could we combine (3) and (5)? If we only have (5), then
>> people might not discover this functionality.
> If discoverability is a problem in the case of 5, we might simply let
> the item in context menu visible, but disabled, so people get curious...
>
>> But perhaps in the dialog we could say something like, "If you want to
>> disable this warning, see Tools> Preferences> Whatever".
> So you propose two RCs - one for 5) and one for disabling 3)?

No, I meant one for (5), which would disable (3).

Riki