Hi, This patch improves the description of $query_format to mention that no quotes shouldn't be used around %s. I'm not sure what $query is, so I left it unchanged. Thanks, Simon --- init.h | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) diff --git a/init.h b/init.h index d730d28..342b8d5 100644 --- a/init.h +++ b/init.h @@ -2168,8 +2168,9 @@ struct option_t MuttVars[] = { ** .pp ** This specifies the command that mutt will use to make external address ** queries. The string should contain a ``%s'', which will be substituted - ** with the query string the user types. See ``$query'' for more - ** information. + ** with the query string the user types. Don't quote ``%s'' in single or + ** double quotes or it may cause security problems! Mutt does handle the + ** quoting on its own. See ``$query'' ** for more information. */ { "query_format", DT_STR, R_NONE, UL &QueryFormat, UL "%4c %t %-25.25a %-25.25n %?e?(%e)?" }, /* -- 1.7.0.3 -- + privacy is necessary + using gnupg http://gnupg.org + public key id: 0x92FEFDB7E44C32F9
Attachment:
pgpKciqmsFQgY.pgp
Description: PGP signature