Up to [local] / src / usr.bin / less
Request diff between arbitrary revisions
Default branch: MAIN
Current tag: HEAD
Revision 1.34 / (download) - annotate - [select for diffs], Sun Apr 14 18:11:54 2024 UTC (8 weeks ago) by guenther
Branch: MAIN
CVS Tags: HEAD
Changes since 1.33: +0 -5 lines
Diff to previous 1.33 (colored)
Delete support for the LESSOPEN and LESSCLOSE environment variables aka the "Input Preprocessor": it's been a source for multiple security bugs in the past as everything has to deal with handling arbitrary filenames and generally resulted in multiple TOCTOU issues. The base system never included a default LESSOPEN setting like some Linux distributions did, but it's a suds-filled sink full of knives to try to use safely. ok tb@ deraadt@ millert@