Hello abbasmousavi, thank you very much for taking on maintenance of this important module.

You asked for suggestions... :)

Consider using http://en.wikipedia.org/wiki/Texvc to validate input and provide security. With the current DruTeX enhanced security mode, it's difficult to decide which LaTeX commands should be whitelisted. Even with the correct whitelist, does the current system prevent cross-site scripting issues?

Texvc is used by mediawiki (and therefore wikipedia), so it's seems like a well tested system appropriate for input from anonymous users.

Comments

abbasmousavi’s picture

abbasmousavi commented
Assigned: Unassigned » abbasmousavi
Status: Active » Postponed

Thanks for suggestion. I think it is a good idea. We should consider adding submodules or options to use texvc and also mimetex. Previous maintainers also had this in mind.

I will work on it as soon as the port to D7 is complete.
If you can help with ideas and patches, you are welcomed.