Remove --wget-timestamp option (contained a remote code execution hole)

1 files changed, 4 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index ca1a182..3e21695 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -11,6 +11,10 @@ git HEAD
     * Saving the filelist from thumbnail mode caused undefined behaviour due
       to handling of uninitialised memory. Since I consider this a rarely
       useful action, the feature has been disabled for thumbnail mode.
+    * Remove -G/--wget-timestamp option. It was probably not working
+      correctly, plus it contained a remote code execution hole when used with
+      malicious URLs containing shell metacharacters (but only if those URLs
+      led to a valid file)
 
 Thu Jun 10 12:12:04 CEST 2010