Policy for opening url links in documents

[Stephan Witt]

Am 17.08.2023 um 01:00 schrieb Richard Kimberly Heck <rikiheck at gmail.com>:
> 
> On 8/16/23 18:29, Pavel Sanda wrote:
>> On Wed, Aug 16, 2023 at 05:30:56PM -0400, Richard Kimberly Heck wrote:
>>>> Now what are your opinions what we should do about it?
>>>> 1) nothing.
>>>> 2) add dialog before launching url. safer but super annoying.
>>>> 3) add dialog before launching url + dont ask again checkbox.
>>>>    not implemented - we'll also need to add session keys, which
>>>>    get erased often.
>>>> 4) add link target to context menu (non trivial to implement)
>>>> 5) add (by default disabled) checkbox in security preference to allow
>>>>    opening links for citations and hyperlinks similarly as we do with
>>>>    scripts.
>>>> 6) ?
>>>> 
>>>> I tend to go for 5, but there might be other options I did not think of...
>>> I'm always quite paranoid about this. I suppose (5) is OK if people know
>>> what they're doing. Could we combine (3) and (5)? If we only have (5), then
>>> people might not discover this functionality.
>> If discoverability is a problem in the case of 5, we might simply let
>> the item in context menu visible, but disabled, so people get curious...
>> 
>>> But perhaps in the dialog we could say something like, "If you want to
>>> disable this warning, see Tools> Preferences> Whatever".
>> So you propose two RCs - one for 5) and one for disabling 3)?
> 
> No, I meant one for (5), which would disable (3).
> 
> Riki

BTW, there is a RC already (but not evaluated in this code path) - citation_search. Perhaps it can be used here?

Stephan