Executable content
Executable content
Posted Apr 17, 2025 8:43 UTC (Thu) by farnz (subscriber, #17727)In reply to: Executable content by oldtomas
Parent article: Catanzaro: Dangerous arbitrary file read vulnerability in Yelp
This has been a cycle since the invention of PostScript (which is a code format, not a description language).
And part of the reason that free software has the "executable content problem" is that it's reusing other free software - instead of writing a help viewer from scratch, they've written something that reuses WebKit to handle the conversion of a document format (HTML) into a display output. That's the point of free software - reuse of other people's code for your purposes, not necessarily the ones they want you to make of it.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.