git.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* [PATCH] Parametrize asciidoc and add --unsafe
@ 2006-01-24 22:15 Pavel Roskin
  2006-01-25  2:08 ` Junio C Hamano
  0 siblings, 1 reply; 3+ messages in thread
From: Pavel Roskin @ 2006-01-24 22:15 UTC (permalink / raw)
  To: git

Including files from the parent directory is considered unsafe by
asciidoc 7.1.0.  This is used in git.txt, which includes ../README.

Since git is developed openly, we shouldn't be afraid of exploits
lurking in the docs.  Create a make variable ASCIIDOC and use it to
always call asciidoc with the --unsafe option.

Signed-off-by: Pavel Roskin <proski@gnu.org>
---

 Documentation/Makefile |   12 +++++++-----
 1 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/Documentation/Makefile b/Documentation/Makefile
index a65fb1b..391f583 100644
--- a/Documentation/Makefile
+++ b/Documentation/Makefile
@@ -28,6 +28,8 @@ man7=$(mandir)/man7
 
 INSTALL?=install
 
+ASCIIDOC = asciidoc --unsafe
+
 #
 # Please note that there is a minor bug in asciidoc.
 # The version after 6.0.3 _will_ include the patch found here:
@@ -69,20 +71,20 @@ clean:
 	rm -f *.xml *.html *.1 *.7 howto-index.txt howto/*.html doc.dep
 
 %.html : %.txt
-	asciidoc -b xhtml11 -d manpage -f asciidoc.conf $<
+	$(ASCIIDOC) -b xhtml11 -d manpage -f asciidoc.conf $<
 
 %.1 %.7 : %.xml
 	xmlto man $<
 
 %.xml : %.txt
-	asciidoc -b docbook -d manpage -f asciidoc.conf $<
+	$(ASCIIDOC) -b docbook -d manpage -f asciidoc.conf $<
 
 git.html: git.txt ../README
 
 glossary.html : glossary.txt sort_glossary.pl
 	cat $< | \
 	perl sort_glossary.pl | \
-	asciidoc -b xhtml11 - > glossary.html
+	$(ASCIIDOC) -b xhtml11 - > glossary.html
 
 howto-index.txt: howto-index.sh $(wildcard howto/*.txt)
 	rm -f $@+ $@
@@ -90,13 +92,13 @@ howto-index.txt: howto-index.sh $(wildca
 	mv $@+ $@
 
 $(patsubst %,%.html,$(ARTICLES)) : %.html : %.txt
-	asciidoc -b xhtml11 $*.txt
+	$(ASCIIDOC) -b xhtml11 $*.txt
 
 WEBDOC_DEST = /pub/software/scm/git/docs
 
 $(patsubst %.txt,%.html,$(wildcard howto/*.txt)): %.html : %.txt
 	rm -f $@+ $@
-	sed -e '1,/^$$/d' $? | asciidoc -b xhtml11 - >$@+
+	sed -e '1,/^$$/d' $? | $(ASCIIDOC) -b xhtml11 - >$@+
 	mv $@+ $@
 
 install-webdoc : html



-- 
Regards,
Pavel Roskin

^ permalink raw reply related	[flat|nested] 3+ messages in thread

* Re: [PATCH] Parametrize asciidoc and add --unsafe
  2006-01-24 22:15 [PATCH] Parametrize asciidoc and add --unsafe Pavel Roskin
@ 2006-01-25  2:08 ` Junio C Hamano
  2006-01-25  6:52   ` Pavel Roskin
  0 siblings, 1 reply; 3+ messages in thread
From: Junio C Hamano @ 2006-01-25  2:08 UTC (permalink / raw)
  To: Pavel Roskin; +Cc: git

Pavel Roskin <proski@gnu.org> writes:

> Including files from the parent directory is considered unsafe by
> asciidoc 7.1.0.  This is used in git.txt, which includes ../README.

Is copying/linking README down when we build documentation a
more conservative option, I wonder?

Does asciidoc prior to 7.1.0 do sensible thing given an --unsafe
option?  If not, how does one override ASCIIDOC from the command
line to the toplevel "make"?

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [PATCH] Parametrize asciidoc and add --unsafe
  2006-01-25  2:08 ` Junio C Hamano
@ 2006-01-25  6:52   ` Pavel Roskin
  0 siblings, 0 replies; 3+ messages in thread
From: Pavel Roskin @ 2006-01-25  6:52 UTC (permalink / raw)
  To: Junio C Hamano; +Cc: git

On Tue, 2006-01-24 at 18:08 -0800, Junio C Hamano wrote:
> Pavel Roskin <proski@gnu.org> writes:
> 
> > Including files from the parent directory is considered unsafe by
> > asciidoc 7.1.0.  This is used in git.txt, which includes ../README.
> 
> Is copying/linking README down when we build documentation a
> more conservative option, I wonder?

I considered this possibility.  I don't have a strong preference.  The
argument in favor of "--unsafe" is that adding a make target is more
intrusive that adding a switch.  Besides, we may want to include more
files from other directories.

> Does asciidoc prior to 7.1.0 do sensible thing given an --unsafe
> option?  If not, how does one override ASCIIDOC from the command
> line to the toplevel "make"?

Good question.  I misunderstood the asciidoc changelog.  Older versions
(before 7.0.4) understand "--safe", but not "--unsafe".  Since version
7.0.4 is less than 2 months old, it would be reasonable not to go ahead
with my patch right now.

Let's make a copy for now.  Symbolic linking doesn't work - asciidoc
recognizes and rejects symlinks.

---
[PATCH] Don't include ../README in git.txt - make a local copy

asciidoc 7.0.4 and newer considers such includes from parent directory
unsafe.

Signed-off-by: Pavel Roskin <proski@gnu.org>
---

 Documentation/.gitignore |    1 +
 Documentation/Makefile   |    9 ++++++---
 Documentation/git.txt    |    2 +-
 3 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/Documentation/.gitignore b/Documentation/.gitignore
index 9fef490..c87c61a 100644
--- a/Documentation/.gitignore
+++ b/Documentation/.gitignore
@@ -4,3 +4,4 @@
 *.7
 howto-index.txt
 doc.dep
+README
diff --git a/Documentation/Makefile b/Documentation/Makefile
index a65fb1b..a3bca86 100644
--- a/Documentation/Makefile
+++ b/Documentation/Makefile
@@ -62,11 +62,14 @@ doc.dep : $(wildcard *.txt) build-docdep
 
 -include doc.dep
 
-git.7: ../README
+git.7: README
+
+README: ../README
+	cp $< $@
 
 
 clean:
-	rm -f *.xml *.html *.1 *.7 howto-index.txt howto/*.html doc.dep
+	rm -f *.xml *.html *.1 *.7 howto-index.txt howto/*.html doc.dep README
 
 %.html : %.txt
 	asciidoc -b xhtml11 -d manpage -f asciidoc.conf $<
@@ -77,7 +80,7 @@ clean:
 %.xml : %.txt
 	asciidoc -b docbook -d manpage -f asciidoc.conf $<
 
-git.html: git.txt ../README
+git.html: git.txt README
 
 glossary.html : glossary.txt sort_glossary.pl
 	cat $< | \
diff --git a/Documentation/git.txt b/Documentation/git.txt
index 25bcb84..e8ef3ef 100644
--- a/Documentation/git.txt
+++ b/Documentation/git.txt
@@ -586,7 +586,7 @@ git Diffs
 
 Discussion[[Discussion]]
 ------------------------
-include::../README[]
+include::README[]
 
 Authors
 -------


-- 
Regards,
Pavel Roskin

^ permalink raw reply related	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2006-01-25  6:52 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-01-24 22:15 [PATCH] Parametrize asciidoc and add --unsafe Pavel Roskin
2006-01-25  2:08 ` Junio C Hamano
2006-01-25  6:52   ` Pavel Roskin

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).