Re: three vulnerabilities, in spell-check and linter pipe-reads, and in emergency-save path

Paul Eggert <[email protected]> Mon, 25 May 2026 08:19:59 -0700
Newsgroups gmane.editors.nano.devel
Organization UCLA Computer Science Department
Message-ID <[email protected]>
On 2026-05-25 04:58, Benno Schulenberg wrote:
> when a user is editing a file that is readable by others, then in my 
> opinion
> it is fine that a half-edited file is also readable by those others.

That is true for the information already there. But it's not true for 
the information the user is adding during the edit session, information 
that the user might not want to save into the original file. So it 
should be safer for the half-edited save file to be accessible only to 
the user.