summaryrefslogtreecommitdiffstats
path: root/doc/send.n
diff options
context:
space:
mode:
Diffstat (limited to 'doc/send.n')
-rw-r--r--doc/send.n19
1 files changed, 14 insertions, 5 deletions
diff --git a/doc/send.n b/doc/send.n
index e949c18..fc93779 100644
--- a/doc/send.n
+++ b/doc/send.n
@@ -5,7 +5,7 @@
'\" See the file "license.terms" for information on usage and redistribution
'\" of this file, and for a DISCLAIMER OF ALL WARRANTIES.
'\"
-'\" SCCS: @(#) send.n 1.18 96/08/27 13:21:47
+'\" SCCS: @(#) send.n 1.19 97/07/07 16:53:29
'\"
.so man.macros
.TH send n 4.0 Tk "Tk Built-In Commands"
@@ -70,8 +70,8 @@ command.
.SH SECURITY
.PP
-The \fBsend\fR command is potentially a serious security loophole,
-since any application that can connect to your X server can send
+The \fBsend\fR command is potentially a serious security loophole. On Unix,
+any application that can connect to your X server can send
scripts to your applications.
These incoming scripts can use Tcl to read and
write your files and invoke subprocesses under your name.
@@ -87,6 +87,15 @@ list of enabled hosts is empty.
This means that applications cannot connect to your server unless
they use some other form of authorization
such as that provide by \fBxauth\fR.
-
+.VS
+Under Windows, any application running on the current machine can send
+Dynamic Data Exchange (DDE) commands which could read and write files and start
+processes. Only the local machine can connect, however, so there are
+no restrictions on which processes can connect. The \fBsend\fR command
+uses DDE as its transport, and a \fBdde\fR command has been added to
+Tk 8.0.
+.VE
.SH KEYWORDS
-application, name, remote execution, security, send
+.VS
+application, dde, name, remote execution, security, send
+.VE