gbranden pushed a commit to branch master
in repository groff.
commit b2c89b9b4817a51364029ab351b55287090ae58e
Author: G. Branden Robinson <[email protected]>
AuthorDate: Sat Nov 1 05:17:25 2025 -0500
[doc,man]: Clarify troff's unsafe mode.
The `cf` request can put arbitrary bytes into grout.
---
doc/groff.texi.in | 8 +++++---
src/roff/troff/troff.1.man | 9 ++++++---
2 files changed, 11 insertions(+), 6 deletions(-)
diff --git a/doc/groff.texi.in b/doc/groff.texi.in
index 1a96b4a31..9a3be9e6d 100644
--- a/doc/groff.texi.in
+++ b/doc/groff.texi.in
@@ -1334,9 +1334,11 @@ enabling the
and
@code{sy}
requests,
-which are disabled by default because they allow an untrusted input
-document to run arbitrary commands
-and write to arbitrary file names.@footnote{GNU
+which are disabled by default because they
+allow an untrusted input document to run arbitrary commands,
+put arbitrary content into
+@command{troff} @c GNU
+or write to arbitrary file names.@footnote{GNU
@command{troff} @c GNU
does not,
however,
diff --git a/src/roff/troff/troff.1.man b/src/roff/troff/troff.1.man
index 6a79d82dc..4e3566e54 100644
--- a/src/roff/troff/troff.1.man
+++ b/src/roff/troff/troff.1.man
@@ -494,9 +494,12 @@ enabling the
and
.B sy
requests,
-which are disabled by default because they allow an untrusted input
-document to run arbitrary commands
-and write to arbitrary file names.
+which are disabled by default because they
+allow an untrusted input document to run arbitrary commands,
+put arbitrary content into
+.I @g@troff \" GNU
+output,
+or write to arbitrary file names.
.
(GNU
.I troff \" GNU
_______________________________________________
groff-commit mailing list
[email protected]
https://lists.gnu.org/mailman/listinfo/groff-commit
