From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_ADSP_CUSTOM_MED, DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FROM,MAILING_LIST_MULTI, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 23695 invoked from network); 1 Aug 2023 15:31:06 -0000 Received: from minnie.tuhs.org (2600:3c01:e000:146::1) by inbox.vuxu.org with ESMTPUTF8; 1 Aug 2023 15:31:06 -0000 Received: from minnie.tuhs.org (localhost [IPv6:::1]) by minnie.tuhs.org (Postfix) with ESMTP id A85A540FFB; Wed, 2 Aug 2023 01:30:57 +1000 (AEST) Received: from mail-qv1-xf36.google.com (mail-qv1-xf36.google.com [IPv6:2607:f8b0:4864:20::f36]) by minnie.tuhs.org (Postfix) with ESMTPS id 1687540FFA for ; Wed, 2 Aug 2023 01:30:53 +1000 (AEST) Received: by mail-qv1-xf36.google.com with SMTP id 6a1803df08f44-63cf69f3c22so39719126d6.3 for ; Tue, 01 Aug 2023 08:30:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1690903852; x=1691508652; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=eMmJqMxFlhcdbZxjZH8hLriD3y88cudn02aQaQhZFgE=; b=JA1UXomNnqDk4YJGZF0xXGDvcF08mKG3DudQAknGEZLNWww+rReb8vpZna6L2Y8Ed+ xmDM7QcxbO0o3Db1N9ZRz+MbbefBFMlQ/MUyAsqg4XGpRBw392zXgBEZpt8Fwgj9MQcv DNccE79EqmkvtOmTEVyineELUojzHS4ZgluWa9yAsPzU6CG0bvTGPB6/Z/kCfBjdEx/z nQGrLMrw5spxneNVjKbNJ0bNa3dtxYDT7dV6nFsjBjDV59Cv7keHv4vtOg0tKeE6Z9J5 G2GSX8prqZx/vKwpQ8W7SBo/HW7l6E9h53zNyUUnehU3HtWLqAwrHN7ciuUtdMLAzZwj c8yA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690903852; x=1691508652; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=eMmJqMxFlhcdbZxjZH8hLriD3y88cudn02aQaQhZFgE=; b=AZrIqAse3rpN5oM4CgqkWcQXNz5XuDU/u2NWj01fLFNry2IjHpda3U/rZtqumzNI6H W75BLr97dP5BKyyTiX2/7vJFL0pvgoHy3sBA3RnrnOlI981O7sSKpEY69oWtaQIv/l81 zfa3LCLavJU3YbRjvIq2529NEnE6/VkPBtm9wVYtAzs2ATI5FTLmdS+mmK6HvX/KiKkc c4hSPdEx6tdpWjrPT8acNsA4KRnD30tpIUnOLxhR00CZo6BAxDh+g7VxAzJto3BIumfC AZnJvV3Xt/SkpSmG5g5UbDRtUl8K3gZuJMwvW9PDjp6Z8kzc1jknhbhb4pnQUXN/PfZj T9uA== X-Gm-Message-State: ABy/qLZUCUAPngBLG2S1qEuJOPTPR0KE5amAB59ixo2y0nay+ePY5NFW 0D67ZfNGQ7rrqPRjo1SgdoOrixM9gr/Ea93Yg9RG/cRykCI= X-Google-Smtp-Source: APBJJlGhwpUXl1eio31jDF20lWev+XjGZVfPEc1Zv2AAneX20l050GA0Ry4loaZMAf5OqLsQmP8tzUSkDBc1nQ2B4tA= X-Received: by 2002:a0c:cb09:0:b0:63d:2fa3:4412 with SMTP id o9-20020a0ccb09000000b0063d2fa34412mr13341222qvk.20.1690903852011; Tue, 01 Aug 2023 08:30:52 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: ron minnich Date: Tue, 1 Aug 2023 08:30:41 -0700 Message-ID: To: Skip Tavakkolian Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Message-ID-Hash: F3D545QMYT6YB4TTLHAS5B3UZMF5RYZX X-Message-ID-Hash: F3D545QMYT6YB4TTLHAS5B3UZMF5RYZX X-MailFrom: rminnich@gmail.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: The Eunuchs Hysterical Society X-Mailman-Version: 3.3.6b1 Precedence: list Subject: [TUHS] Re: shell escapes in utilities List-Id: The Unix Heritage Society mailing list Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: I'm ok with things like ed, I'm more thinking of situations where people would (e.g.) use xdvi to view a file, and Bad Things Happened. I don't think ed counts, unless we're that worried about scripts. at least for me, the xdvi thing was a real shock. On Tue, Aug 1, 2023 at 7:29=E2=80=AFAM Skip Tavakkolian wrote: > > Looking at sources on TUHS, it looks like ed had it as early as V5: > https://minnie.tuhs.org/cgi-bin/utree.pl?file=3DV5/usr/source/s1/ed1.s > > On Mon, Jul 31, 2023, 10:48 PM ron minnich wrote: >> >> I got to wondering, based on the sendmail discussions, how many shell >> escapes have appeared over the years? >> >> uucp >> sendmail >> xdvi : "The "allowShell" option enables the shell escape in PostScript s= pecials" >> >> There must be a lot of them, however.