Tweak shell protection news to mention a few more characters.

diff --git a/NEWS.md b/NEWS.md
index 555d16f59926c6b849c8b3c4a36ede0cd29efac0..f4c7483694a9f1fe30953f6ca753f9c73c182134 100644 (file)
--- a/NEWS.md
+++ b/NEWS.md
@@ -217,9 +217,10 @@
  - A new form of arg protection was added that works similarly to the older
    `--protect-args` ([`-s`](rsync.1#opt)) option but in a way that avoids
    breaking things like rrsync (the restricted rsync script): rsync now uses
-   backslash escaping for sending "shell-active" characters to the remote
-   shell. This includes spaces, so fetching a remote file via a simple quoted
-   filename value now works by default without any extra quoting:
+   backslash escaping for sending "shell-active" characters to the remote shell
+   (such as `$(){}<>#&` and others). This includes spaces, so fetching a remote
+   file via a quoted filename value now works by default without any extra
+   quoting:
 
    ```shell
        rsync -aiv host:'a simple file.pdf' .