<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Droid Sans Mono'; font-size:10pt; font-weight:400; font-style:normal;">On Sunday 22 February 2009, John Tapsell wrote:<br>
> 2009/2/22 Michael Pyne <BALEETED>:<br>
> > "This will start the program '%s'. If you are unsure of the origin, click<br>
> > Cancel."<br>
><br>
> Could you try to sanitize %s somewhat? Strip out ' and " characters,<br>
> cut it to 10 or so characters etc. Try to make it difficult for<br>
> social engineering through the program name.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Sure, shouldn't be too hard.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Regards,<br>
- Michael Pyne</p></body></html>