From: Will Maier <willmaier@ml1.net>

[apps/madmutt.git] / doc / manual.txt

diff --git a/doc/manual.txt b/doc/manual.txt
index 5a04f7a..0c263a3 100644 (file)
--- a/doc/manual.txt
+++ b/doc/manual.txt
@@ -3970,25 +3970,27 @@
        One of these is the mailcap mechanism as defined by RfC 1524. Mutt-ng can be
        set up to _\ba_\bu_\bt_\bo_\bm_\ba_\bt_\bi_\bc_\ba_\bl_\bl_\by execute any given utility as listed in one of the mail-
        cap files (see the _\b$_\bm_\ba_\bi_\bl_\bc_\ba_\bp_\b__\bp_\ba_\bt_\bh (section 7.4.116  , page 114) variable for
-       details.) These utilities may have security issues like overriding arbitrary
-       files, contain exploitable bugs or just leak information which is a bad in com-
-       bination with running them without prompting. When using mutt-ng's autoview
+       details.)
+
+       These utilities may have a variety of security vulnerabilities, including
 
        The Mutt Next Generation E-Mail Client                                       79
 
-       mechanism involing use of mailcap files, please make sure that
+       overwriting of arbitrary files, information leaks or other exploitable bugs.
+       These vulnerabilities may go unnoticed by the user, especially when they are
+       called automatically (and without interactive prompting) from the mailcap
+       file(s). When using mutt-ng's autoview mechanism in combination with mailcap
+       files, please be sure to...
 
-          +\bo you manually select trustworthy applications with a reasonable calling
-            sequence
+          +\bo manually select trustworth applications with a reasonable calling sequence
 
-          +\bo you check the contents of mailcap files from time to time (for example
-            after doing software installations/upgrades)
+          +\bo periodically check the contents of mailcap files, especially after soft-
+            ware installations or upgrades
 
-          +\bo you, if you're the system's operator, always keep the software packages
-            involved up-to-date
+          +\bo keep the software packages referenced in the mailcap file up to date
 
-          +\bo you never ever change the default value of the _\b$_\bm_\ba_\bi_\bl_\bc_\ba_\bp_\b__\bs_\ba_\bn_\bi_\bt_\bi_\bz_\be (section
-            7.4.117  , page 115) variable
+          +\bo leave the _\b$_\bm_\ba_\bi_\bl_\bc_\ba_\bp_\b__\bs_\ba_\bn_\bi_\bt_\bi_\bz_\be (section 7.4.117  , page 115) variable in its
+            default state to restrict mailcap expandos to a safe set of characters
 
        _\b6_\b._\b4_\b._\b2  _\bO_\bt_\bh_\be_\br
 
@@ -4013,7 +4015,7 @@
 
        The Mutt Next Generation E-Mail Client                                       80
 
-            -A   expand an alias
+            -A      expand an alias
             -a      attach a file to a message
             -b      specify a blind carbon-copy (BCC) address
             -c      specify a carbon-copy (Cc) address