From 7021fc36466d80ca0c4105b82239d3ba008ade80 Mon Sep 17 00:00:00 2001 From: Joey Hess Date: Sun, 30 Aug 2009 15:32:42 -0400 Subject: [PATCH] still mispelling josh's name.. --- doc/security.mdwn | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/security.mdwn b/doc/security.mdwn index ba3eac187..200ae29e2 100644 --- a/doc/security.mdwn +++ b/doc/security.mdwn @@ -420,7 +420,7 @@ later that day, in version 2.70. The fix was backported to testing as version ## Insufficient blacklisting in teximg plugin -Josh Tripplet discovered on 28 Aug 2009 that the teximg plugin's +Josh Triplett discovered on 28 Aug 2009 that the teximg plugin's blacklisting of insecure TeX commands was insufficient; it could be bypassed and used to read arbitrary files. This was fixed by enabling TeX configuration options that disallow unsafe TeX commands. -- 2.45.1