- From: Terje Bless <link@pobox.com>
- Date: Sat, 11 Sep 2004 14:09:51 +0200
- To: Bjoern Hoehrmann <derhoermi@gmx.net>
- cc: Liam Quinn <liam@htmlhelp.com>, QA Dev <public-qa-dev@w3.org>, openjade-devel@lists.sourceforge.net
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Bjoern Hoehrmann <derhoermi@gmx.net> wrote:
>+ || dir[j] == '\\'
I've not really parsed this code so it may be irrelevant, but my first concern
at allowing the backslash character to appear anywhere is that it might allow
escape sequences to get passed through (to the shell, or interpreted in C++
land). Can you confirm that the current code is not susceptible to that?
>Win32 install docs should point out that our SGML Library config parameter
>needs to be a full x:\ path, in fact, a comment to this effect should
>precede the corresponding line in the default configuration file.
Writeup and check in to CVS please?
- --
"A plague o' both your houses! I am sped." - Mercutio, kinsman to the Prince.
See Project Gutenberg <URL:http://promo.net/pg/> for more.
-----BEGIN PGP SIGNATURE-----
Version: PGP SDK 3.0.3
iQA/AwUBQULrDqPyPrIkdfXsEQK4dACgz4QNkg1yG5sswYxeGOW2R9EGQOsAniJi
Y2ZL8QF6LBYt0eRD7EtL5zyx
=cQzh
-----END PGP SIGNATURE-----
Received on Saturday, 11 September 2004 12:10:27 UTC