W3C home > Mailing lists > Public > public-qa-dev@w3.org > September 2004

Re: [wmvs] OpenSP -R and Win32

From: Terje Bless <link@pobox.com>
Date: Sat, 11 Sep 2004 14:09:51 +0200
To: Bjoern Hoehrmann <derhoermi@gmx.net>
cc: Liam Quinn <liam@htmlhelp.com>, QA Dev <public-qa-dev@w3.org>, openjade-devel@lists.sourceforge.net
Message-ID: <r02010300-1035-7C9B8BA203EB11D98FFD0030657B83E8@[193.157.66.23]>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bjoern Hoehrmann <derhoermi@gmx.net> wrote:

>+ || dir[j] == '\\'

I've not really parsed this code so it may be irrelevant, but my first concern
at allowing the backslash character to appear anywhere is that it might allow
escape sequences to get passed through (to the shell, or interpreted in C++
land). Can you confirm that the current code is not susceptible to that?



>Win32 install docs should point out that our SGML Library config parameter
>needs to be a full x:\ path, in fact, a comment to this effect should
>precede the corresponding line in the default configuration file.

Writeup and check in to CVS please?



- -- 
"A plague o' both your houses! I am sped." - Mercutio, kinsman to the Prince.
                   See Project Gutenberg <URL:http://promo.net/pg/> for more.

-----BEGIN PGP SIGNATURE-----
Version: PGP SDK 3.0.3

iQA/AwUBQULrDqPyPrIkdfXsEQK4dACgz4QNkg1yG5sswYxeGOW2R9EGQOsAniJi
Y2ZL8QF6LBYt0eRD7EtL5zyx
=cQzh
-----END PGP SIGNATURE-----
Received on Saturday, 11 September 2004 12:10:27 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Thursday, 19 August 2010 18:12:44 GMT