4 ms·
You execute arbitrary commands with troff. I used this feature a lot for getting output from code samples, but it's definitely a security issue if you don't tr
by scorpicam 3y ago
You execute arbitrary commands with troff. I used this feature a lot for getting output from code samples, but it's definitely a security issue if you don't trust the source. Or, if you think shelling out is too boring, the troff macro language is actually turing complete and is a disturbingly usable for scripting.
- rezonant 3y agoOof, I kind of suspected this might be the case.
- jwilk 3y ago> You execute arbitrary commands with troff. This should be disabled by default since groff v1.17 (released in 2001): https://git.savannah.gnu.org/cgit/groff.git/commit/?id=7b3f578e9296c528 https://git.savannah.gnu.org/cgit/groff.git/commit/?id=7b3f5...
- cyberpunk 3y agoI'm not convinced there's not some clever way to get roff to make $PAGER run commands; echo <esc>:!cat /etc/passwd etc