https://bugzilla.mindrot.org/show_bug.cgi?id=1762
Damien Miller <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] Resolution|--- |WONTFIX Status|NEW |RESOLVED --- Comment #3 from Damien Miller <[email protected]> --- re comment #1: I don't think this needs documentation, since it's a) pretty standard behaviour for user programs to use $SHELL where available (e.g. in ssh). BTW, the ENVIRONMENT section is for variables that are set when logging in, not variables that ssh uses internally so even if we did document it re comment #3: ITerm2 is clearly doing the wrong thing here. If it's passing stuff from an untrusted source (e.g. the web) to a shell program, then it's ITerm2's job to ensure that it's appropriately sanitised first. -- You are receiving this mail because: You are watching the assignee of the bug. You are watching someone on the CC list of the bug. _______________________________________________ openssh-bugs mailing list [email protected] https://lists.mindrot.org/mailman/listinfo/openssh-bugs
