Add a comment to the TODO item about localization for Nmap. Need to be

careful of security risks from functions that change their behavior
depending on the locale.
This commit is contained in:
david 2009-11-10 20:48:20 +00:00
parent 04dc3ab1f3
commit 3718c179b2

View file

@ -256,7 +256,10 @@ o The Zenmap translation system
http://nmap.org/docs.html. We should definitely try to use the same
translation methods for Zenmap as we do for Nmap. In fact, maybe we
can create a combined PO file Nmap, Zenmap, Ncat, and Ndiff so that
they can all be translated and maintained together.
they can all be translated and maintained together. Something to
consider: calling setlocale can change the behavior of functions like
isalpha. Locale-dependent functions need to be checked for security
risks.
o Consider changing Nsock so that it is able to take advantage of more
modern interfaces to dealing with large sockets, rather than just