> Content-Disposition: attachment; filename=texdoc.patch

Interesting, but IMHO texdoc should do the decompression and not assume
that the viewer does this. ghostview doesn't. acroread dosn't (compressing
pdf does not make sense, but one can never be sure what people do).

> Content-Disposition: attachment; filename=xdvi.patch

Interesting, but one should not assume that the "tempfile" program is
always available. One can prevent symlink attacks by creating a 700-mode
directory and putting temp files there. This is portable, tempfile is not
portable.

If cleanup is done using event handlers (trap), then the event handler
should already be set before the temp files are created...

Thomas

Reply via email to