summaryrefslogtreecommitdiff
path: root/doc/plugins/po.mdwn
diff options
context:
space:
mode:
authorintrigeri <intrigeri@boum.org>2009-01-01 23:10:16 +0100
committerintrigeri <intrigeri@boum.org>2009-01-01 23:12:08 +0100
commitc821cee108257e0d124c2b7516017af4be334463 (patch)
treea491f910ce7d905771063dc1b144b9dd8af59646 /doc/plugins/po.mdwn
parent4ee7f6314891489d6f42120e97f2c1c393d6093f (diff)
po(cansave): check PO validity using new isvalidpo function
... because Po4a's parser does not care about malformed PO data. Use gettext's msgfmt program instead. Signed-off-by: intrigeri <intrigeri@boum.org>
Diffstat (limited to 'doc/plugins/po.mdwn')
-rw-r--r--doc/plugins/po.mdwn4
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/plugins/po.mdwn b/doc/plugins/po.mdwn
index c150092bf..a32d66af1 100644
--- a/doc/plugins/po.mdwn
+++ b/doc/plugins/po.mdwn
@@ -399,6 +399,10 @@ use in our case, I suggest we define `ENV{COLUMNS}` before loading
`refreshpofiles()` runs this external program. A po4a developer
answered he does "not expect any security issues from it".
+### msgfmt
+
+`isvalidpo()` runs this external program. Its security should be checked.
+
### Fuzzing input
I was not able to find any public information about gettext or po4a