Lua: support sandboxed parsing with `pandoc.read`.

The function `pandoc.read` is now taking an optional fourth parameter
that specifies the environment in which the parser will be run. Passing
the string `sandbox` as the argument causes the reader to run in a
sandbox, thereby preventing all access to the network and file system.

Closes: #10831

1 files changed, 34 insertions, 0 deletions

diff --git a/pandoc-lua-engine/test/lua/module/pandoc.lua b/pandoc-lua-engine/test/lua/module/pandoc.lua
index 5df547d24..3db58c0f8 100644
--- a/pandoc-lua-engine/test/lua/module/pandoc.lua
+++ b/pandoc-lua-engine/test/lua/module/pandoc.lua
@@ -293,6 +293,40 @@ return {
         'Unknown input format nosuchreader'
       )
     end),
+    group 'read_env' {
+      test('images are added to the mediabag', function ()
+        local epub = io.open('lua/module/sample.epub', 'rb'):read('a')
+        local _ = pandoc.read(epub, 'epub')
+        assert.are_equal(
+          #pandoc.mediabag.list(),
+          1
+        )
+      end),
+      test('images from EPUB are added when using the sandbox', function ()
+        local epub = io.open('lua/module/sample.epub', 'rb'):read('a')
+        local _ = pandoc.read(epub, 'epub', nil, 'sandbox')
+        assert.are_equal(
+          #pandoc.mediabag.list(),
+          1
+        )
+      end),
+      test('includes work in global env', function ()
+        local tex = '\\include{lua/module/include.tex}'
+        local doc = pandoc.read(tex, 'latex', nil, 'global')
+        assert.are_equal(
+          doc.blocks,
+          pandoc.Blocks{pandoc.Para 'included'}
+        )
+      end),
+      test('sandbox disallows access to the filesystem', function ()
+        local tex = '\\include{lua/module/include.tex}'
+        local doc = pandoc.read(tex, 'latex', nil, 'sandbox')
+        assert.are_equal(
+          doc.blocks,
+          pandoc.Blocks{}
+        )
+      end),
+    },
     group 'extensions' {
       test('string spec', function ()
         local doc = pandoc.read('"vice versa"', 'markdown-smart')