Re: nosgml options

On Thu, 23 Jan 2003, Nigel J. Andrews wrote:

> I installed on a Debian 3.0 Linux system and had to remove the -R switch from
> the nosgml invocation. It's not worth making a patch just for that.
> 
> opensp 1.5 (1.5pre5-5 .deb package number)

The -R switch is required to prevent a file disclosure vulnerability.  
The -R option isn't available in 1.5pre5, but it's in the 1.5 release
version available from <http://sourceforge.net/projects/openjade/>.

If the validator on your system is available to untrusted users, I 
would recommend upgrading your OpenSP and retaining the -R option.

Regards,

-- 
Liam Quinn