Security
What Polemic does to keep projects from other people safe to open.
LaTeX projects can carry more than text. Polemic is built so you can open and compile a folder you received from someone else.
Compiling untrusted projects
- Compile settings that came with the project never run. Only your own settings apply.
- A compile is stopped after 10 minutes, including any processes it started.
Git
A project's Git configuration and hooks are never executed. A repository you cloned cannot run code through Polemic.
Files
- Polemic reads and writes only inside the project. Anything that leads outside it is refused.
- Snapshots never follow a path out of the project.
- Deleted files go to the trash, not straight to oblivion.
- Your settings are written safely and can be read only by your user.
The app
The app window loads content only from Polemic itself. The AI quickfix sends your data only over encrypted connections, or to your own machine.