[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] Re: Security risk of server side text editing ...
From:       Ian Zimmerman <itz () very ! loosely ! org>
Date:       2017-11-29 4:46:58
Message-ID: 20171129044658.mkrtl3nhjuhxw6k7 () matica ! foolinux ! mooo ! com
[Download RAW message or body]

On 2017-11-28 21:05, Michael Orlitzky wrote:

> Editing a file in-place should not create *another* file in the
> current directory with a different name/suffix. I realize that's
> subjective, but a lot of (even long time) users will tell you that no
> way in hell did they expect that to happen.

Maybe, but I think editors have done this from time immemorial.  Compare
for instance the comments on the limits of locking on p. 456 of Stevens
& Rago.

-- 
Please don't Cc: me privately on mailing lists and Usenet,
if you also post the followup to the list or newsgroup.
To reply privately _only_ on Usenet, fetch the TXT record for the domain.
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic