groff
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Groff should not permit ANSI escapes using \N'27'


From: John Gardner
Subject: Groff should not permit ANSI escapes using \N'27'
Date: Tue, 28 Jul 2020 00:26:49 +1000

Hi folks,

Raw escape characters (U+001B) get stripped from source-code during
formatting, but inserting one is still possible using \N'27':

\N'27'[4mI don't remember underlining this.\N'27'[0m

This has potential security implications for people using `less -R` (and
can still mess up terminal output for those who don't).

mandoc replaces this with <ESC> for -Tascii output, and with U+FEFF (�) for
-Tutf8. Its -Tlint "device" doesn't complain about it, either.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]