[luatex] io.popen security (was: slow io.popen)

[Stephan Hennig]

Am 29.01.2013 18:04, schrieb Stephan Hennig:

> Is it intentional that luatex and texlua don't behave identical wrt
> shell commands in popen?

Found it in sec.3.2 of the manual:

> In keeping with the other TEX-like programs in TEXLIVE, the two LUA 
> functions os.execute and io.popen (as well as the two new functions 
> os.exec and os.spawn that are explained below) take the value of 
> shell_escape and/or shell_escape_commands in account. Whenever
> LUATEX is run with the assumed intention to typeset a document (and
> by that I mean that it is called as luatex, as opposed to texlua, and
> that the commandline option --luaonly was not given), it will only
> run the four functions above if the matching texmf.cnf variable(s)
> or their texconfig (see section 4.15) counterparts allow execution
> of the requested system command. In ‘script interpreter’ runs of
> LUATEX, these settings have no effect, and all four functions
> function as normal.

Sorry for the noise!

Best regards,
Stephan Hennig