Policy for opening url links in documents

[Richard Kimberly Heck]

On 8/16/23 19:26, Stephan Witt wrote:
> Am 17.08.2023 um 01:00 schrieb Richard Kimberly Heck <rikiheck at gmail.com>:
>> On 8/16/23 18:29, Pavel Sanda wrote:
>>> On Wed, Aug 16, 2023 at 05:30:56PM -0400, Richard Kimberly Heck wrote:
>>>>> Now what are your opinions what we should do about it?
>>>>> 1) nothing.
>>>>> 2) add dialog before launching url. safer but super annoying.
>>>>> 3) add dialog before launching url + dont ask again checkbox.
>>>>>     not implemented - we'll also need to add session keys, which
>>>>>     get erased often.
>>>>> 4) add link target to context menu (non trivial to implement)
>>>>> 5) add (by default disabled) checkbox in security preference to allow
>>>>>     opening links for citations and hyperlinks similarly as we do with
>>>>>     scripts.
>>>>> 6) ?
>>>>>
>>>>> I tend to go for 5, but there might be other options I did not think of...
>>>> I'm always quite paranoid about this. I suppose (5) is OK if people know
>>>> what they're doing. Could we combine (3) and (5)? If we only have (5), then
>>>> people might not discover this functionality.
>>> If discoverability is a problem in the case of 5, we might simply let
>>> the item in context menu visible, but disabled, so people get curious...
>>>
>>>> But perhaps in the dialog we could say something like, "If you want to
>>>> disable this warning, see Tools> Preferences> Whatever".
>>> So you propose two RCs - one for 5) and one for disabling 3)?
>> No, I meant one for (5), which would disable (3).
>>
>> Riki
> BTW, there is a RC already (but not evaluated in this code path) - citation_search. Perhaps it can be used here?

That seems to be for something else---whether to use a script to search 
for a PDF or whatever---but it seems kind of redundant, since 
citation_search_view also has to be set.

Riki