From 3ceedbd1f9a0a1444d13aa64cd85db28cb17d219 Mon Sep 17 00:00:00 2001 From: "Arnold D. Robbins" Date: Fri, 5 Dec 2014 13:38:43 +0200 Subject: More info on CGI. --- doc/gawk.texi | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'doc/gawk.texi') diff --git a/doc/gawk.texi b/doc/gawk.texi index 66174009..42196498 100644 --- a/doc/gawk.texi +++ b/doc/gawk.texi @@ -3932,7 +3932,13 @@ Command-line variable assignments of the form This option is particularly necessary for World Wide Web CGI applications that pass arguments through the URL; using this option prevents a malicious (or other) user from passing in options, assignments, or @command{awk} source -code (via @option{-e}) to the CGI application. This option should be used +code (via @option{-e}) to the CGI application.@footnote{For more detail, +please see Section 4.4 of @uref{http://www.ietf.org/rfc/rfc3875, +RFC 3875}. Also see the +@uref{http://lists.gnu.org/archive/html/bug-gawk/2014-11/msg00022.html, +explanatory note sent to the @command{gawk} bug +mailing list}.} +This option should be used with @samp{#!} scripts (@pxref{Executable Scripts}), like so: @example -- cgit v1.2.3