# # # patch "monotone.texi" # from [ee7c1189daee41efbcbdcb7f306d9bc02ca6c81f] # to [9317b048ed863710dff95f048ea6b51ace933e7c] # ============================================================ --- monotone.texi ee7c1189daee41efbcbdcb7f306d9bc02ca6c81f +++ monotone.texi 9317b048ed863710dff95f048ea6b51ace933e7c @@ -11556,6 +11556,15 @@ @section Implementation Differences If you explicitely need to write to either stdout or stderr, please use @code{io.stdout:write} and @code{io.stderr.write}. address@hidden os.execute, io.popen + +Both functions have been disabled for security reasons. You should use +their replacements @code{spawn} and @code{spawn_pipe}. + +The original versions do not apply any kind of shell character escaping, +which might lead to serious problems f.e. when a merger is automatically +invoked by such a function. + @end ftable