man2web 0.88 is now available for download.
New in this version:
- support for calling lynx to display the page (and follow links)
- fixed a bug that would cause a crash if apropos failed
- create certain defaults (switches and section entries) based on the distribution.
This fully fixes the vulnerability that would allow a user to read arbitrary files by either include shell escapes or a file path in the man page name. It also fixes a bug that I introduced in the 0.86 quick release that prevented any man output at all...
The fix is still incomplete, so I am removing all releases until I fix this later today.
This release fixes a security bug where a user could type something like "groff;cat</etc/passwd" and read abitrary files on the server.
It also features XHTML 1.0 compliant output.
This is the initial release of man2web. It should be fairly usable, but has only been tested on a couple of platforms. Please send feedback to man2web-sections@lists.sourceforge.net .