Policy for opening url links in documents

[Pavel Sanda]

On Wed, Aug 16, 2023 at 07:00:18PM -0400, Richard Kimberly Heck wrote:
> On 8/16/23 18:29, Pavel Sanda wrote:
> >On Wed, Aug 16, 2023 at 05:30:56PM -0400, Richard Kimberly Heck wrote:
> >>>Now what are your opinions what we should do about it?
> >>>1) nothing.
> >>>2) add dialog before launching url. safer but super annoying.
> >>>3) add dialog before launching url + dont ask again checkbox.
> >>>    not implemented - we'll also need to add session keys, which
> >>>    get erased often.
> >>>4) add link target to context menu (non trivial to implement)
> >>>5) add (by default disabled) checkbox in security preference to allow
> >>>    opening links for citations and hyperlinks similarly as we do with
> >>>    scripts.
> >>>6) ?
> >>>
> >>>I tend to go for 5, but there might be other options I did not think of...
> >>I'm always quite paranoid about this. I suppose (5) is OK if people know
> >>what they're doing. Could we combine (3) and (5)? If we only have (5), then
> >>people might not discover this functionality.
> >If discoverability is a problem in the case of 5, we might simply let
> >the item in context menu visible, but disabled, so people get curious...
> >
> >>But perhaps in the dialog we could say something like, "If you want to
> >>disable this warning, see Tools> Preferences> Whatever".
> >So you propose two RCs - one for 5) and one for disabling 3)?
> 
> No, I meant one for (5), which would disable (3).

I see, I can live with that option as well.

Pavel