From 6b60b5ac12814f0b54209cb6417f9ad1709dce20 Mon Sep 17 00:00:00 2001 From: Ihor Radchenko Date: Thu, 11 Jan 2024 14:15:19 +0100 Subject: [PATCH] fixup! org-man-open: Fix shell expansion vulnerability (Emacs bug#66390) --- lisp/ol-man.el | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lisp/ol-man.el b/lisp/ol-man.el index d801f59d8..2a8288938 100644 --- a/lisp/ol-man.el +++ b/lisp/ol-man.el @@ -50,7 +50,7 @@ matched strings in man buffer." (let* ((command (match-string 1 path)) ;; FIXME: Remove after we drop Emacs 29 support. ;; Working around security bug #66390. - (command (if (org-man-store-link (equal (Man-translate-references ";id") "\\;id")) + (command (if (equal (Man-translate-references ";id") "\\;id") ;; We are on Emacs that properly escapes man ;; command args (see Emacs commit 820f0793f0b). command