You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Sep 7, 2020. It is now read-only.
If we use \newcommand in a TeX math, the influences will be persistent in current process.
The expected result is -- all \newcommands should only affect the current requested page.
The harm is that if I run a randering server with this library, a malicious person can submit a request that replaces builtin commands with their owns with \renewcommand, so later requests won't return correct result.
If we use
\newcommand
in a TeX math, the influences will be persistent in current process.The expected result is -- all
\newcommand
s should only affect the current requested page.The harm is that if I run a randering server with this library, a malicious person can submit a request that replaces builtin commands with their owns with
\renewcommand
, so later requests won't return correct result.This upstream PR may help: mathjax/MathJax-node#348.
The text was updated successfully, but these errors were encountered: