po plugin: todo++ : security note about system()

Signed-off-by: intrigeri <intrigeri@boum.org>
2008-10-15 00:34:25 +02:00 · 2008-10-15 00:34:25 +02:00 · d07c6b707d
parent 27bfe18f51
commit d07c6b707d
1 changed files with 4 additions and 0 deletions
--- a/doc/plugins/po.mdwn
+++ b/doc/plugins/po.mdwn
@ -186,6 +186,10 @@ Committing changes to a "master" page:
 - all the needed POT and PO files have to be created
 - the PO files must be checked into version control

+**FIXME** `refreshpofiles` uses `system()`, whose args have to be
+checked more thoroughly to prevent any security issue (command
+injection, etc.).
+
 UI consistency: rename "Edit" button on slave pages
 ---------------------------------------------------