lilypond & wikipedia

[Werner LEMBERG]

There's an interesting discussion (since five years!) why lilypond
can't be integrated into wikipedia yet:

  https://bugzilla.wikimedia.org/show_bug.cgi?id=189

A resumé of the discussion is this last comment (from about a week
ago):

  We want LilyPond to be as safe to call as, say, ImageMagick (or
  ABC!).  If it's configured correctly, we should be guaranteed that
  it will terminate in a reasonably short amount of time while using a
  reasonably small amount of memory/disk/network/etc.  I think this is
  a clear enough requirement to relay.  Alternatively, if LilyPond
  devs won't do this, someone could write a preprocessing sanitizer of
  some kind like we have for LaTeX, as long as it achieves the same
  effect.

Tim Starling, one of the main wikipeda software developers,  says:

  My understanding is that

  a) safe mode is not secure, being trivially DoS-able by short
     infinite loop scripts
  b) safe mode will not work for many of the free scores available on
     the web

  The problems with LilyPond are sufficiently severe that I have, from
  time to time, researched alternative music renderers such as
  Philip's Music Writer that don't have an embedded scripting
  language.

Anyone who can shed more light on the raised issues?


    Werner