Issue copied from https://github.com/wsexport/tool/issues/142
Cladis commented on 25 Nov 2017:
Long story short T181322 should be done for this tool as well.
(Because of https://github.com/wsexport/tool/issues/141 (Conversion to pdf failed.) I am not able to test current behavior, but I assume it is wrong as in Epub scores are images and since per T178803#3703633 PDF is created basing on Epub)
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T259208 PDF export should render music scores natively, i.e. not as images | |||
| Resolved | Security | tstarling | T257091 Re-enable the Score extension in safe mode | ||
| Restricted Task | |||||
| Resolved | Security | Legoktm | T257062 Lilypond seemingly not subject to restrictions (CVE-2020-29007) | ||
| Resolved | Security | faidon | T258547 LilyPond allows arbitrary PostScript and does not use -dSAFER (CVE-2020-17353) | ||
| Restricted Task | |||||
| Resolved | Security | Legoktm | T257207 Document MW Firejail config/profile | ||
| Stalled | Security | None | T259210 LilyPond safe mode escape due to output-def-lookup and output-def-scope (CVE-2020-17354) |
Marking this as stalled because the Score extension is disabled for the time being. Waiting on T257091.
Support for SVG output (with LilyPond 2.24) is now in the Score extension, in REL1_39 and master branches. Not sure what needs to happen before it gets deployed to Wikipedia/media anywhere, though.