@script nodes re-enabled

[Terry Brown]

A "warning" of sorts, @script nodes are working again, I guess no one
uses them, because:

- c.executeScript(arsg=args,p=p,useSelectedText=False,silent=True)
+ c.executeScript(args=args,p=p,useSelectedText=False,silent=True)

so if you've downloaded a malware .leo file which has been failing
to format your hard disk because of this bug, watch out :-)

Of course they don't run unless you set

@bool scripting-at-script-nodes = True

anyway.

Cheers -Terry

[TL]

A search for "@script" in the on-line User Guide and FAQ did not find
anything. Is there any documentation on this directive?

TL

[zpcspm]

It looks like the search doesn't like the '@' symbol.
However, @script nodes are a part of mod_scripting plugin, so they are
mentioned here:
http://webpages.charter.net/edreamleo/plugins.html#mod-scripting

[Edward K. Ream]

True, the bug fix (the proper spelling of c.executeScritp)  enables the feature, but as you say, the user setting must be on for the feature to be enabled, so nothing has changed.

The feature is truly dangerous, but I think it is reasonable to leave it potentially enabled, because a newbie can't enable it by mistake.  Otoh, any other pluging could enable it maliciously, so perhaps this is even more dangerous than it seems at first blush.

The bottom line is never to enable plugins from unknown or untrusted sources.

Edward