1
0
mirror of https://git.tartarus.org/simon/putty.git synced 2025-01-25 01:02:24 +00:00
putty-source/doc
Simon Tatham 91cf47dd0d Plink: default to sanitising non-tty console output.
If Plink's standard output and/or standard error points at a Windows
console or a Unix tty device, and if Plink was not configured to
request a remote pty (and hence to send a terminal-type string), then
we apply the new control-character stripping facility.

The idea is to be a mild defence against malicious remote processes
sending confusing escape sequences through the standard error channel
when Plink is being used as a transport for something like git: it's
OK to have actual sensible error messages come back from the server,
but when you run a git command, you didn't really intend to give the
remote server the implicit licence to write _all over_ your local
terminal display. At the same time, in that scenario, the standard
_output_ of Plink is left completely alone, on the grounds that git
will be expecting it to be 8-bit clean. (And Plink can tell that
because it's redirected away from the console.)

For interactive login sessions using Plink, this behaviour is
disabled, on the grounds that once you've sent a terminal-type string
it's assumed that you were _expecting_ the server to use it to know
what escape sequences to send to you.

So it should be transparent for all the use cases I've so far thought
of. But in case it's not, there's a family of new command-line options
like -no-sanitise-stdout and -sanitise-stderr that you can use to
forcibly override the autodetection of whether to do it.

This all applies the same way to both Unix and Windows Plink.
2019-02-20 07:27:22 +00:00
..
blurb.but Switch to using Halibut's new direct .CHM generation. 2017-05-13 18:51:10 +01:00
chm.css Minor style tweaks for the CHM. 2006-12-19 10:28:44 +00:00
config.but Add option whether to include header when logging. 2018-09-26 12:13:01 +01:00
errors.but Remove some ancient cruft from the FAQ. 2017-05-23 23:13:17 +01:00
faq.but Add a FAQ about servers that don't like IUTF8. 2017-07-12 10:19:23 +01:00
feedback.but Switch chiark URLs to https. 2017-05-07 16:29:01 +01:00
gs.but Cross-reference all the host key docs. 2016-03-26 17:38:49 +00:00
index.but Tweak docs for GSSAPI key exchange. 2018-05-20 13:57:35 +01:00
intro.but Remove references to "Win32" and "32-bit Windows". 2017-02-15 23:58:25 +00:00
Makefile Switch to using Halibut's new direct .CHM generation. 2017-05-13 18:51:10 +01:00
man-pag.but Support sh/csh syntax switching for Unix Pageant. 2016-03-25 16:43:59 +00:00
man-pg.but Document cmdgen ability to read public-only keys. 2017-02-11 21:12:16 +00:00
man-pl.but Add -share -noshare command line option to plink to share SSL connections. 2017-07-08 09:28:20 +01:00
man-pscp.but Switch chiark URLs to https. 2017-05-07 16:29:01 +01:00
man-psft.but Switch chiark URLs to https. 2017-05-07 16:29:01 +01:00
man-ptel.but Switch chiark URLs to https. 2017-05-07 16:29:01 +01:00
man-pter.but Examples in man pages for '-fn' option. 2016-03-27 11:33:21 +01:00
man-putt.but Switch chiark URLs to https. 2017-05-07 16:29:01 +01:00
mancfg.but Now that Halibut is capable of generating man pages better than I 2004-03-24 19:36:04 +00:00
manpages.but Now that Halibut is capable of generating man pages better than I 2004-03-24 19:36:04 +00:00
pageant.but Emphasise that agent forwarding exposes all keys. 2016-03-25 13:15:57 +00:00
pgpkeys.but GPG key rollover. 2018-08-25 14:38:47 +01:00
plink.but Plink: default to sanitising non-tty console output. 2019-02-20 07:27:22 +00:00
pscp.but Update version number for 0.70 release. 2017-07-04 20:29:54 +01:00
psftp.but Rework versioning system to not depend on Subversion. 2014-09-24 10:33:13 +00:00
pubkey.but Update docs and FAQ for current DSA policy. 2016-03-27 20:10:56 +01:00
site.but Hmm, that relative link wasn't too good. Try a more helpful one. 2003-10-30 10:41:59 +00:00
sshnames.but Cross-reference the description of winadj@putty.projects.tartarus.org 2014-10-21 11:33:33 +00:00
udp.but Mention 'no VLAs' in the C-standards UDP section. 2019-01-02 22:14:15 +00:00
using.but Document Ctrl-Shift-PgUp/PgDn. 2018-02-04 14:19:31 +00:00
vids.but Rework versioning system to not depend on Subversion. 2014-09-24 10:33:13 +00:00