On Wed, 6 Jul 2005, Brian Candler wrote:

> I'm uncomfortable with that, as there may be unforeseen security holes.
> Currently there's no way to block out ${stat}, for example. 

There probably ought to be. Noted.

> [Aside: perhaps forbid_filter_existstest ought to block out ${stat} too? ]

Maybe. :-)

-- 
Philip Hazel            University of Cambridge Computing Service,
[EMAIL PROTECTED]      Cambridge, England. Phone: +44 1223 334714.
Get the Exim 4 book:    http://www.uit.co.uk/exim-book

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to