• x00z@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    ·
    7 days ago

    The real power comes from the scriptability and integration with JavaScript, though. We are sure lots of people will find uses for the ability to embed any document LibreOffice can open into any web page, control and automate it from JavaScript, with the choice of a full local user interface – or none, just the content, controlled with a JavaScript UI instead. The code is all under the MIT licence, so it’s all-FOSS, and all the work is being upstreamed to LibreOffice itself.

    I’m guessing this might introduce a lot of new attack vectors?

    • brian@programming.dev
      link
      fedilink
      arrow-up
      1
      ·
      6 days ago

      idk if it will. it’s not adding scripting to documents(which already exists), it’s allowing a webpage that you’ve opened, that is already running code, embed a libreoffice document and control it.

      unless you’re uploading your documents to a webpage and it’s stealing them or something of that form, I don’t think there’s much if any new security threat

  • poVoq@slrpnk.net
    link
    fedilink
    arrow-up
    7
    ·
    7 days ago

    Hmm, real time collab is a pretty cool adition. One of the main reasons why I mostly switched to OnlyOffice a while ago.