From 4c92f196259f0dcfbaf266bed88785dd7e21e954 Mon Sep 17 00:00:00 2001 From: Karl Berry Date: Sat, 18 Sep 2010 00:24:18 +0000 Subject: set DVIPDFMXINPUTS to not include . git-svn-id: svn://tug.org/texlive/trunk@19789 c570f23f-e606-0410-a88d-b1316a301751 --- Master/texmf/web2c/texmf.cnf | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'Master') diff --git a/Master/texmf/web2c/texmf.cnf b/Master/texmf/web2c/texmf.cnf index 2bdfe3dcf6b..42c6ddde4ed 100644 --- a/Master/texmf/web2c/texmf.cnf +++ b/Master/texmf/web2c/texmf.cnf @@ -428,6 +428,10 @@ TEX4HTINPUTS = .;$TEXMF/tex4ht/base//;$TEXMF/tex4ht/ht-fonts/{$TEX4HTFONTSET}// TW_LIBPATH = $TEXMFCONFIG/texworks TW_INIPATH = $TW_LIBPATH +% For security, do not look in . for dvipdfmx.cfg, since the D option +% would allow command execution. +DVIPDFMXINPUTS = $TEXMF/dvipdfmx + % Find scripts that are distributed/installed in the texmf tree. % Lua needs to look in TEXINPUTS for lua scripts distributed with packages. -- cgit v1.2.3