[PATCH] Use eval() to shell-parse $EDITOR for pass-edit

martin f. krafft madduck at madduck.net
Thu Nov 28 21:51:42 CET 2019


Regarding the following, written by "Jason A. Donenfeld" on 2019-11-28 at 21:25 Uhr +0100:
>I *don't* agree that it's too risky. Rather, I'm 
>interested in learning if there's precedent for the 
>change before we make it. Can you research how EDITOR is 
>handled elsewhere, please?

Debian's sensible-editor doesn't use eval.

/usr/bin/bashbug doesn't use eval.

/usr/bin/git-authors doesn't use eval.

That's all I have in /usr/bin here ;)

-- 
@martinkrafft | https://riot.im/app/#/room/#madduck:madduck.net
  
for years, we have thought that a million monkeys typing at a million
typewriters would eventually produce the complete works of shakespeare.
today, thanks to the internet, we know this is not true.
  
spamtraps: madduck.bogus at madduck.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20191129/eaa14202/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: digital_signature_gpg.asc
Type: application/pgp-signature
Size: 1187 bytes
Desc: Digital GPG signature (see http://martin-krafft.net/gpg/sig-policy/999bbcc4/current)
URL: <http://lists.zx2c4.com/pipermail/password-store/attachments/20191129/eaa14202/attachment.asc>


More information about the Password-Store mailing list