Custom Markdown element to run Shoes code

[IanTrudel]

Define a custom Markdown element to embed and run Shoes/Ruby code within a Markdown file. For example:

# Custom Markdown element 

%%%
button("Shoes?") do
   alert("Shoes inside!")
end
%%%

This example doesn't stop here. 
Let's calculate 8 + 5: %8 + 5%. 
It's a %strong("bold")% statement.

And now loading and running filename.rb...
%!filename.rb%

[ccoupe]

Consider the security implications of that, Please! Anybody could write a 'bad' actor in their md and deliver it in an ebook without user permission.

[IanTrudel]

Anyone can alter the code generated by the eBook builder. Anything deployed in Shoes is considered a risk by Windows 10, isn't it? The joy of interpreted programming language!

[IanTrudel]

Perhaps you are referring to downloaded content? We may disable the runnable feature on downloaded content by default. :)

[IanTrudel]

The alternative would be to add a section to the wizard #18 to allow authors to embed code, forms and other stuff. Maybe some kind of ERB templates would be useful.

The generated eBook would include the said code but not within the markdown. Thus, the author vouches for the eBook it publishes.

[ccoupe]

They could also create a custom Shoes.exe , sign it with their key a lot damn faster. We're looking at diminishing returns. We don't know how to create some markdown in Shoes. We don't know if anybody else wants to create an ebook or how much work they will go too to do it.

A brilliant idea is not the same as a successful idea.

[IanTrudel]

There are ways to sandbox the user code. Either using tainted? or an existing sandbox gem.

You must have a field day with Shoes.visit. Not exactly security in mind.

My recommendation here would be to remove 1.0.0 tag in consideration of what you said and keep this issue open for future reference, adding notes, etc. We can revisit this idea at a later time. Would that be suitable to you?