gbranden pushed a commit to branch master
in repository groff.
commit 404ed8e7e8f25a4177fc49a5b7cbbac4da7859c4
Author: G. Branden Robinson <[email protected]>
AuthorDate: Thu Jul 11 09:10:19 2024 -0500
[docs]: Document restriction on file names.
* doc/groff.texi.in (Groff Options):
* man/groff.7.man (Syntax reference conventions):
* src/roff/troff/troff.1.man (Options): Document restriction on file
names used as request arguments: no spaces, tabs, or line feeds.
---
ChangeLog | 8 ++++++++
doc/groff.texi.in | 6 ++++--
man/groff.7.man | 7 +++++++
src/roff/troff/troff.1.man | 11 ++++++++++-
4 files changed, 29 insertions(+), 3 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index 5f0594507..8e212fe77 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,11 @@
+2024-07-11 G. Branden Robinson <[email protected]>
+
+ * doc/groff.texi.in (Groff Options):
+ * man/groff.7.man (Syntax reference conventions):
+ * src/roff/troff/troff.1.man (Options): Document restriction on
+ file names used as request arguments: no spaces, tabs, or line
+ feeds.
+
2024-07-10 G. Branden Robinson <[email protected]>
* src/devices/grotty/tests/basic_latin_glyphs_map_correctly.sh:
diff --git a/doc/groff.texi.in b/doc/groff.texi.in
index 687998690..5fa2f9c75 100644
--- a/doc/groff.texi.in
+++ b/doc/groff.texi.in
@@ -464,7 +464,7 @@ Documentation License''.
@title groff
@subtitle The GNU implementation of @code{troff}
@subtitle version @VERSION@
-@subtitle June 2024
+@subtitle July 2024
@author Trent@tie{}A.@: Fisher
@author Werner Lemberg
@author G.@tie{}Branden Robinson
@@ -1321,7 +1321,9 @@ and Font Description Files}.) This selection can be
overridden with the
Operate in @dfn{unsafe mode}, which enables the @code{open},
@code{opena}, @code{pi}, @code{pso}, and @code{sy} requests. These
requests are disabled by default because they allow an untrusted input
-document to write to arbitrary file names and run arbitrary commands.
+document to write to arbitrary file names@footnote{GNU @command{troff}
+does not, however, accept tabs, newlines (line feeds), or spaces in file
+names supplied as arguments to requests.} and run arbitrary commands.
This option also adds the current directory to the macro package search
path; see the @option{-m} option above. @command{groff} passes
@option{-U} to @command{gpic} and @command{gtroff}.
diff --git a/man/groff.7.man b/man/groff.7.man
index cf11605a2..78da627a2 100644
--- a/man/groff.7.man
+++ b/man/groff.7.man
@@ -2286,6 +2286,13 @@ is an ordinary character sequence representing a file
name on the
system.
.\" ...limiting the file names you can express; see Savannah #64071.
.
+GNU
+.I troff \" GNU
+does not accept tabs,
+newlines
+(line feeds),
+or spaces in file names supplied as arguments to requests.
+.
.TPx
.I font
is a typeface specified as a font name,
diff --git a/src/roff/troff/troff.1.man b/src/roff/troff/troff.1.man
index e16ab9bde..d3825fa0c 100644
--- a/src/roff/troff/troff.1.man
+++ b/src/roff/troff/troff.1.man
@@ -10,7 +10,7 @@ typesetter and document formatter
.\" Legal Terms
.\" ====================================================================
.\"
-.\" Copyright (C) 1989-2023 Free Software Foundation, Inc.
+.\" Copyright (C) 1989-2024 Free Software Foundation, Inc.
.\"
.\" This file is part of groff, the GNU roff type-setting system.
.\"
@@ -486,6 +486,15 @@ requests,
which are disabled by default because they allow an untrusted input
document to write to arbitrary file names and run arbitrary commands.
.
+(GNU
+.I troff \" GNU
+does not,
+however,
+accept tabs,
+newlines
+(line feeds),
+or spaces in file names supplied as arguments to requests.)
+.
This option also adds the current directory to the macro package search
path;
see the
_______________________________________________
Groff-commit mailing list
[email protected]
https://lists.gnu.org/mailman/listinfo/groff-commit
