this post was submitted on 13 Feb 2025
37 points (100.0% liked)

Opensource

1961 readers
10 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

CreditsIcon base by Lorc under CC BY 3.0 with modifications to add a gradient



founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 7 points 1 week ago (1 children)

The real power comes from the scriptability and integration with JavaScript, though. We are sure lots of people will find uses for the ability to embed any document LibreOffice can open into any web page, control and automate it from JavaScript, with the choice of a full local user interface – or none, just the content, controlled with a JavaScript UI instead. The code is all under the MIT licence, so it's all-FOSS, and all the work is being upstreamed to LibreOffice itself.

I'm guessing this might introduce a lot of new attack vectors?

[–] brian 1 points 6 days ago (1 children)

idk if it will. it's not adding scripting to documents(which already exists), it's allowing a webpage that you've opened, that is already running code, embed a libreoffice document and control it.

unless you're uploading your documents to a webpage and it's stealing them or something of that form, I don't think there's much if any new security threat

[–] [email protected] 1 points 6 days ago

Yeah I thought so too but was not sure .