Next Release?

[Pavel Sanda]

On Wed, Aug 30, 2023 at 07:36:03AM +0200, Jürgen Spitzmüller wrote:
> Don't see this problem, but if it is there, we can go async.

Seems working.

> >   when more result on one query is found
> > - eat STDERR output to avoid mysterious crashes of spawned processes
> 
> At the moment, the script only opens the first matched file AFAICS.
> This will often not be the desired one (e.g. with multiple publications
> of an author per year).
> 
> What it should do, and this cannot be done inside the script:
> 
> * Return a list with all found files
> * Present this list to the user in a dialog so that they can select the
> desired file or abort, if the desired file is not listed.

You already have solution for that.

> > - allow specific arguments for specific viewers
> 
> Example?

qpdfview --unique

> What concerns me, security-wise, is that the current approach does not
> tell the user which file will be opened after the query. Just the
> keywords that will be queried. I think this is not satisfying.

I understand your concern and as said do not oppose fixing this.

On the other hand, I realized yesterday night, that the latest
patch is game over for me. It relays the execution to Qt, which
in turns relays that to xdg on linux system. If you are out of
mainstream DEs like Gnome or KDE, bad luck for you(*). 

If we go with your patch then I need to fiddle with xdg/mime on each
system I want to use lyx -- or rather revert locally your patch.
Doable, but somewhat sad result for the feature I conceived :)

So my plea is to allow running more powerful scripts via the
"?internally_handled?" return flag (see my other mail) while letting
the default to be more security aware.


Pavel

(*) That brings me back to recent question on trac: did xdg-open
option improved over the last years to be reliable launcher
on various systems? It's not entirely its fault, because it 
fails/depends in mime utils, but the answer is no.
Can write more details if interested.