diff options
| author | jan.nijtmans <nijtmans@users.sourceforge.net> | 2020-09-14 13:25:16 (GMT) |
|---|---|---|
| committer | jan.nijtmans <nijtmans@users.sourceforge.net> | 2020-09-14 13:25:16 (GMT) |
| commit | 39aec08fb0bcd5aa7d51f44c3b79e21d8de33744 (patch) | |
| tree | 2eeb4befb4f1ef1b1fe50521d45f6d78bd31fcb1 /doc | |
| parent | f073bc7484740398be58c99c4313c4c6202954f7 (diff) | |
| parent | 66798b2c0139ffe530f62d2f3519859a451c6eaa (diff) | |
| download | tcl-39aec08fb0bcd5aa7d51f44c3b79e21d8de33744.zip tcl-39aec08fb0bcd5aa7d51f44c3b79e21d8de33744.tar.gz tcl-39aec08fb0bcd5aa7d51f44c3b79e21d8de33744.tar.bz2 | |
Merge 8.7
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/interp.n | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/doc/interp.n b/doc/interp.n index 3a48e5e..732e9d3 100644 --- a/doc/interp.n +++ b/doc/interp.n @@ -659,9 +659,9 @@ including itself. .SH "ALIAS INVOCATION" .PP The alias mechanism has been carefully designed so that it can -be used safely when an untrusted script is executing -in a safe child and the target of the alias is a trusted -parent. The most important thing in guaranteeing safety is to +be used safely in an untrusted script which is being executed in a +safe interpreter even if the target of the alias is not a safe +interpreter. The most important thing in guaranteeing safety is to ensure that information passed from the child to the parent is never evaluated or substituted in the parent; if this were to occur, it would enable an evil script in the child to invoke @@ -743,7 +743,7 @@ To help avoid this problem, no substitutions or evaluations are applied to arguments of \fBinterp invokehidden\fR. .PP Safe interpreters are not allowed to invoke hidden commands in themselves -or in their descendants. This prevents safe children from gaining access to +or in their descendants. This prevents them from gaining access to hidden functionality in themselves or their descendants. .PP The set of hidden commands in an interpreter can be manipulated by a trusted |