[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Groff should not permit ANSI escapes using \N'27'
|
From: |
Dave Kemper |
|
Subject: |
Re: Groff should not permit ANSI escapes using \N'27' |
|
Date: |
Fri, 31 Jul 2020 17:55:51 -0500 |
On 7/27/20, John Gardner <gardnerjohng@gmail.com> wrote:
> Raw escape characters (U+001B) get stripped from source-code during
> formatting, but inserting one is still possible using \N'27':
>
> \N'27'[4mI don't remember underlining this.\N'27'[0m
>
> This has potential security implications for people using `less -R` (and
> can still mess up terminal output for those who don't).
I'd say anything with security implications should be submitted in the
bug tracker (http://savannah.gnu.org/bugs/?func=additem&group=groff).