web commit from 66.118.98.137:

diff --git a/doc/security.mdwn b/doc/security.mdwn
index a3e38721831b5ffbff497fe2cda00876da3ef17a..e25cc9ce9a90d2fc9b8b4701f6e059ce2f9f7f74 100644 (file)
--- a/doc/security.mdwn
+++ b/doc/security.mdwn
@@ -92,3 +92,7 @@ to the html pages, etc.
 
 If the wrapper script is made suid, then any bugs in this wrapper would be
 security holes. The wrapper is written as securely as I know how, is based on code that has a history of security use long before ikiwiki, and there's been no problem yet.
 
 If the wrapper script is made suid, then any bugs in this wrapper would be
 security holes. The wrapper is written as securely as I know how, is based on code that has a history of security use long before ikiwiki, and there's been no problem yet.

+
+## shell exploits
+
+ikiwiki does not expose untrusted data to the shell. In fact it doesn't use system() at all, and the only use of backticks is on data supplied by the wiki admin. And it runs with taint checks on of course..
\ No newline at end of file