Martin v. Löwis <mar...@v.loewis.de> added the comment:

> What is the security issue? text/plain can't execute arbitrary code in your 
> browser.

Depending on the browser, it could trigger "funny" control sequences
(in particular in a text browser running in a terminal). I believe that
text/plain *can* run arbitrary code.

_______________________________________________________
PSF Meta Tracker <metatrac...@psf.upfronthosting.co.za>
<http://psf.upfronthosting.co.za/roundup/meta/issue381>
_______________________________________________________
_______________________________________________
Tracker-discuss mailing list
Tracker-discuss@python.org
http://mail.python.org/mailman/listinfo/tracker-discuss

Reply via email to