Topic on Extension talk:SyntaxHighlight

Linux - Mandatory access to /bin/bash to execute pygmentize seems to be inherently unsafe

1

It seems that the pygmentize library uses the mediawiki Shell command to execute bash on Linux.

This in return needs /bin/bash to be accessible.

I understand that you will need to give the web user access to /bin/bash so the pygmentize library will work. Is that true?

I am very hesitant to give a web user access to bash for safety reasons