minted package requires that I enable unrestricted shell escapes (
-shell-escape). This is a bit dangerous: it means that malicious latex files can run arbitrary commands and overwrite arbitrary files on the filesystem.
Is there a way to use
minted without enabling unrestricted shell escapes? I know that it needs to call the Pygmentize program, and it calls
ifplatform which runs the
uname shell command. I noticed that there is a "restricted shell escape" feature; is there a way to use
minted with restricted shell escapes. Or is there some other way to reduce the risk?