From: Wayne Davison <wayne@opencoder.net>
Date: Thu, 30 Mar 2023 19:56:33 +0000 (-0700)
Subject: Tweak shell protection news to mention a few more characters.
X-Git-Tag: v3.3.0pre1~7
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c69dc7a5ab473bb52a575b5803026c2694761084;p=thirdparty%2Frsync.git

Tweak shell protection news to mention a few more characters.
---

diff --git a/NEWS.md b/NEWS.md
index 555d16f5..f4c74836 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -217,9 +217,10 @@
  - A new form of arg protection was added that works similarly to the older
    `--protect-args` ([`-s`](rsync.1#opt)) option but in a way that avoids
    breaking things like rrsync (the restricted rsync script): rsync now uses
-   backslash escaping for sending "shell-active" characters to the remote
-   shell. This includes spaces, so fetching a remote file via a simple quoted
-   filename value now works by default without any extra quoting:
+   backslash escaping for sending "shell-active" characters to the remote shell
+   (such as `$(){}<>#&` and others). This includes spaces, so fetching a remote
+   file via a quoted filename value now works by default without any extra
+   quoting:
 
    ```shell
        rsync -aiv host:'a simple file.pdf' .