Update signature of agent_query() to match the rest of the world.

[sgt/putty] / unix / pterm.1

diff --git a/unix/pterm.1 b/unix/pterm.1
index bbdb081..ed0a7c5 100644 (file)
--- a/unix/pterm.1
+++ b/unix/pterm.1
@@ -68,7 +68,7 @@ Specify the foreground colour to use for text covered by the cursor.
 .IP "\fB\-cbg\fP \fIcolour\fP"
 Specify the background colour to use for text covered by the cursor.
 In other words, this is the main colour of the cursor.
-.IP "\fB\-T\fP \fItitle\fP"
+.IP "\fB\-title\fP \fItitle\fP"
 Specify the initial title of the terminal window. (This can be
 changed under control of the server.)
 .IP "\fB\-ut\-\fP or \fB+ut\fP"
@@ -201,6 +201,22 @@ screen exactly the way they found it.
 This option should be set to either 0 or 1; the default is 0. When
 set to 1, it stops the server from remotely controlling the title of
 the \fIpterm\fP window.
+.IP "\fBpterm.NoRemoteQTitle\fP"
+This option should be set to either 0 or 1; the default is 1. When
+set to 1, it stops the server from remotely requesting the title of
+the \fIpterm\fP window.
+
+This feature is a \fBPOTENTIAL SECURITY HAZARD\fP. If a malicious
+application can write data to your terminal (for example, if you
+merely \fIcat\fP a file owned by someone else on the server
+machine), it can change your window title (unless you have disabled
+this using the \fBNoRemoteWinTitle\fP resource) and then use this
+service to have the new window title sent back to the server as if
+typed at the keyboard. This allows an attacker to fake keypresses
+and potentially cause your server-side applications to do things you
+didn't want. Therefore this feature is disabled by default, and we
+recommend you do not turn it on unless you \fBreally\fP know what
+you are doing.
 .IP "\fBpterm.NoDBackspace\fP"
 This option should be set to either 0 or 1; the default is 0. When
 set to 1, it disables the normal action of the Delete (^?) character
@@ -450,5 +466,3 @@ resource is equivalent to the \fI\-ls\fP command-line option.
 .SH BUGS
 Most of the X resources have silly names. (Historical reasons from
 PuTTY, mostly.)
-
-Character-set switching and Unicode are not yet supported.