Add warning about OpenSP < 1.5.

2 files changed, 13 insertions, 5 deletions

diff --git a/htdocs/docs/install.html b/htdocs/docs/install.html
index b85e7a8..a089c47 100755
--- a/htdocs/docs/install.html
+++ b/htdocs/docs/install.html
@@ -1,5 +1,5 @@
-<!--#set var="revision" value="\$Id: install.html,v 1.10 2005-01-09 19:46:19 ville Exp $"
---><!--#set var="date" value="\$Date: 2005-01-09 19:46:19 $"
+<!--#set var="revision" value="\$Id: install.html,v 1.11 2005-04-28 06:13:22 ville Exp $"
+--><!--#set var="date" value="\$Date: 2005-04-28 06:13:22 $"
 --><!--#set var="title" value="Installation Documentation for The W3C Markup Validation Service"
 --><!--#set var="relroot" value="../"
 --><!--#include virtual="../header.html" -->
@@ -78,6 +78,10 @@
         The SGML parser we're currently using is <code>OpenSP 1.5</code>,
         which can be found on the
         <a href="http://openjade.sourceforge.net/">OpenJade home page</a>.
+        Do <em>not</em> try to run the Validator with an earlier than 1.5
+        version of OpenSP.  It will not work.  If one hacks it to "work"
+        with such a version, a potential security hole will also open.
+        Just use OpenSP 1.5 or later.
       </p>
 
       <h5>Perl Modules</h5>
@@ -89,7 +93,7 @@
             title="Comprehensive Perl Archive Network">CPAN</acronym></a>
         (minimum versions in parenthesis after the name). The following
         list was complete when CVS spit out:
-        <code>$Date: 2005-01-09 19:46:19 $</code>. <tt>:-)</tt>
+        <code>$Date: 2005-04-28 06:13:22 $</code>. <tt>:-)</tt>
       </p>
      <p>
        One easy - and strongly recommended - way to take care of all these
diff --git a/httpd/cgi-bin/check b/httpd/cgi-bin/check
index 47f999b..eb5bdfe 100755
--- a/httpd/cgi-bin/check
+++ b/httpd/cgi-bin/check
@@ -9,7 +9,7 @@
 # This source code is available under the license at:
 #     http://www.w3.org/Consortium/Legal/copyright-software
 #
-# $Id: check,v 1.414 2005-04-09 17:31:42 ville Exp $
+# $Id: check,v 1.415 2005-04-28 06:13:22 ville Exp $
 
 #
 # Disable buffering on STDOUT!
@@ -220,7 +220,7 @@ Directory not readable (permission denied): @_r
 
   #
   # Strings
-  $VERSION    =  q$Revision: 1.414 $;
+  $VERSION    =  q$Revision: 1.415 $;
   $VERSION    =~ s/Revision: ([\d\.]+) /$1/;
 
   #
@@ -595,6 +595,10 @@ sub parse (\$) {
   #
   # By default, use SGML catalog file and SGML Declaration.
   my $catalog  = File::Spec->catfile($CFG->{Paths}->{SGML}->{Library}, 'sgml.soc');
+  #
+  # Note: if you feel the urge to remove -R from here, please understand that
+  # doing so opens a potential security hole.  Don't do that; instead just
+  # make sure you're running OpenSP 1.5 or later.
   my @spopt = qw(
                  -R
                  -wvalid