From 7c08d5c12faab203fddbda896ca845311439a558 Mon Sep 17 00:00:00 2001 From: Nicolas Goaziou Date: Sat, 5 Dec 2015 13:50:19 +0100 Subject: [PATCH] ORG-NEWS: Fix an entry --- etc/ORG-NEWS | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/etc/ORG-NEWS b/etc/ORG-NEWS index 9f4eb4fce..0422ff13e 100644 --- a/etc/ORG-NEWS +++ b/etc/ORG-NEWS @@ -113,13 +113,15 @@ indentation. *** Secure placeholders in capture templates Placeholders in capture templates are no longer expanded recursively. -However, ~%(...)~ constructs are expanded very late, so you can still -fill the contents of the S-exp with the replacement text of other -placeholders. +However, ~%(...)~ constructs are expanded very late, so you can fill +the contents of the S-exp with the replacement text of non-interactive +placeholders. As before, interactive ones are still expanded as the +very last step, so the previous statement doesn't apply to them. -Only ~%(...)~ placeholders initially present are expanded. This -prevents evaluating potentially malicious code when another placehold, -e.g., ~%i~ expands to a S-exp. +Note that only ~%(...)~ placeholders initially present in the +template, or introduced using a file placeholder, i.e., ~%[...]~ are +expanded. This prevents evaluating potentially malicious code when +another placeholder, e.g., ~%i~ expands to a S-exp. *** ~org-babel-check-confirm-evaluate~ is now a function instead of a macro The calling convention has changed.