On Thu, 6 Mar 1997 patl@??? wrote:
> How about an option that says 'use a shell if the line contains
> any unquoted shell meta-chars' ? Better yet, only if the line
> contained unquoted shell meta-chars BEFORE variable expansion.
On Thu, 6 Mar 1997, Robert Black wrote:
> Ouch.
I must agree with that. One of the advantages of _not_ using a shell is
that you don't have to worry about meta-characters turning up in
variables you are inserting.
On 6 Mar 1997, David Blacka wrote:
> I would rather create another transport that mail adminstrators use
> instead of the current pipe transport.
Why do you think it should be another transport rather than an option on
the existing pipe transport?
> Well, what kind of accidents? Not that I don't think the current
> mechanism is bad.
An innocent, unsuspecting, trusting, user with a filter file that inserts
something from the message as an argument to a pipe could get caught out
by meta characters in the insert.
--
Philip Hazel University Computing Service,
ph10@??? New Museums Site, Cambridge CB2 3QG,
P.Hazel@??? England. Phone: +44 1223 334714
