tintin++ for Debian
-------------------

The #sys command should be used with care, as it's easy to trick the client
to execute unwanted system commands via triggers.

An example of an exploitable trigger could be:

#action {Bob says %0} {say %0}

If Bob says 'Hi ; #sys rm -rf *', you'd be in trouble.

The correct way of doing this would be:

#action {Bob says %0 ;} {say %0} 1
#action {Bob says %0} {say %0} 2

Tintin++ should be patched so it strips "\" and ";" from the #action
function.

 -- Jordi Mallach <jordi@debian.org>, Tue,  4 Sep 2001 18:02:10 +0200
 With modifications by Christopher Sacca <csacca@thecsl.org> 
 on Thu,  3 Feb 2005 11:07:21 -0500
