4 ms·
It should be noted that shell escape is disabled by default in standard installations and the -shell-escape flag must be explicitly passed during compilation to
by JorgeGT 11y ago
It should be noted that shell escape is disabled by default in standard installations and the -shell-escape flag must be explicitly passed during compilation to enable it.
So if someone is knowledgeable enough to add this flag I would assume that they know what they are doing, such as the guys cited in the article who create an isolated Docker container for each compilation cycle [note: very nice use of Docker!].
- zaphar 11y agoWith the caveat, of course, that when it comes to security you can't just say "Docker and done". Docker is one layer of defense but it's not completely vetted and depending on it to fix all your security problems is a terrible practice to get into.