Hi, Quoting Marcus Better (mar...@better.se): > > The question rather would be: How would you specify a pathname/filename > > that has spaces in it? > > By escaping like the shell perhaps?
That is what svn documents in the svnbook, yes. > > following that approach might raise security related issues with > > injecting escape sequences, > > Are you seriously saying that hg, svn and git have security issues > because of this? Because they work fine with my setting. I wouldn't see it as a security issue, but it's certainly something that needs to be documented well. (If it's shell, then which shell is it? Does it have to be the user's shell?) A quick google survey turns up some IBM tools which explicitly say that EDITOR must be a full path for them, so presumably they even call execv(3) rather than execvp(3), much less system(3). But if prevailing implementation practice among modern tools is to go through the shell, then I'm sympathetic to that request for the sake of compatibility. Do you have a patch for this? d. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
