From 92d079de82f4928c83fb1f05387ae892616d4f8a Mon Sep 17 00:00:00 2001 From: Kalle Olavi Niemitalo Date: Fri, 29 Dec 2006 23:24:42 +0200 Subject: [PATCH] Set ecmascript.enable = 0 by default. ECMAScript support is still considered experimental, and there are several known vulnerabilities (bugs 548, 755, 771). --- src/ecmascript/ecmascript.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/ecmascript/ecmascript.c b/src/ecmascript/ecmascript.c index eeda6f0e..c7cd24b4 100644 --- a/src/ecmascript/ecmascript.c +++ b/src/ecmascript/ecmascript.c @@ -43,7 +43,7 @@ static struct option_info ecmascript_options[] = { N_("ECMAScript options.")), INIT_OPT_BOOL("ecmascript", N_("Enable"), - "enable", 0, 1, + "enable", 0, 0, N_("Whether to run those scripts inside of documents.")), INIT_OPT_BOOL("ecmascript", N_("Script error reporting"),