summaryrefslogtreecommitdiff
path: root/Master/texmf
diff options
context:
space:
mode:
authorKarl Berry <karl@freefriends.org>2010-09-18 00:24:18 +0000
committerKarl Berry <karl@freefriends.org>2010-09-18 00:24:18 +0000
commit4c92f196259f0dcfbaf266bed88785dd7e21e954 (patch)
tree624d2f392c8b4f5979131bdd33d07925b2e1db04 /Master/texmf
parent5de813ce85e2ea79a1db7cdccd7ed2fe2dc5171e (diff)
set DVIPDFMXINPUTS to not include .
git-svn-id: svn://tug.org/texlive/trunk@19789 c570f23f-e606-0410-a88d-b1316a301751
Diffstat (limited to 'Master/texmf')
-rw-r--r--Master/texmf/web2c/texmf.cnf4
1 files changed, 4 insertions, 0 deletions
diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf
index 2bdfe3dcf6b..42c6ddde4ed 100644
--- a/Master/texmf/web2c/texmf.cnf
+++ b/Master/texmf/web2c/texmf.cnf
@@ -428,6 +428,10 @@ TEX4HTINPUTS = .;$TEXMF/tex4ht/base//;$TEXMF/tex4ht/ht-fonts/{$TEX4HTFONTSET}//
TW_LIBPATH = $TEXMFCONFIG/texworks
TW_INIPATH = $TW_LIBPATH
+% For security, do not look in . for dvipdfmx.cfg, since the D option
+% would allow command execution.
+DVIPDFMXINPUTS = $TEXMF/dvipdfmx
+
% Find scripts that are distributed/installed in the texmf tree.
% Lua needs to look in TEXINPUTS for lua scripts distributed with packages.