On Tue, 7 Nov 2006, Piotr Engelking wrote:
reopen 396949
thanks
Version 2.8.7dev2 attempts to fix the bug by checking if the user owns
the .mime.types and .mailcap files before opening them. The assumption
that user trusts the files he owns, is, however, flawed. Consider, for
an example:
* files downloaded by the user
* files unpacked by the user from an archive
* files on a filesystem mounted by the user
...none of which would be executed by the user unknowingly (and could
equally be confused with his home directory), and furthermore, the comment
does not address my point that the files are read once at startup
--
Thomas E. Dickey
http://invisible-island.net
ftp://invisible-island.net
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
