Security concerns when compiling gnuplot online

Rami Boutassghount <[email protected]> Tue, 5 Dec 2023 04:35:56 +0100
Newsgroups gmane.comp.graphics.gnuplot.user
Message-ID <CA+Cz6o7ui5oWzZ6qNoWarL_gp77NLsk6ALJSaptxrT3VxqehMA@mail.gmail.com>
Hello everyone,

Yesterday I was looking for an online gnuplot compiler tool, and it did not
find any. So I build my own: https://ramiboutas.com/gnuplot

The idea behind it was to test some plots when I don't want to use the
terminal every time I want to plot something.

So, I built the interface to the compiler using PNG output. However, I
needed to block some commands (understanding command for any user string
input that goes in the text area), so that a user cannot have information
about my server or anything not desired.

These commands are
not_allowed = ["set terminal", "set output", "gpval_", "cd ", "system "]

*Is there anything else that I should consider?*

Thank you very much!

Have a nice day,
Rami.

_______________________________________________
gnuplot-info mailing list
[email protected]
Membership management via: https://lists.sourceforge.net/lists/listinfo/gnuplot-info