Up to [local] / src / usr.bin / less
Request diff between arbitrary revisions
Default branch: MAIN
Current tag: HEAD
Revision 1.20 / (download) - annotate - [select for diffs], Sun Apr 14 18:11:54 2024 UTC (8 weeks ago) by guenther
Branch: MAIN
CVS Tags: HEAD
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)
Delete support for the LESSOPEN and LESSCLOSE environment variables aka the "Input Preprocessor": it's been a source for multiple security bugs in the past as everything has to deal with handling arbitrary filenames and generally resulted in multiple TOCTOU issues. The base system never included a default LESSOPEN setting like some Linux distributions did, but it's a suds-filled sink full of knives to try to use safely. ok tb@ deraadt@ millert@