From: Jeremy Harris <jgh146exb@wizmail.org>
Date: Fri, 21 Jul 2023 09:35:19 +0000 (+0100)
Subject: Docs: another note on quoting data for lookups
X-Git-Tag: exim-4.97-RC0~51
X-Git-Url: https://git.exim.org/exim.git/commitdiff_plain/66ce3fc9291d13fe8a7d4099942b9101aef1c38c

Docs: another note on quoting data for lookups
---

diff --git a/doc/doc-docbook/spec.xfpt b/doc/doc-docbook/spec.xfpt
index 9eb0b6b56..7a28d8107 100644
--- a/doc/doc-docbook/spec.xfpt
+++ b/doc/doc-docbook/spec.xfpt
@@ -7378,10 +7378,15 @@ of the following form is provided:
 .code
 ${quote_<lookup-type>:<string>}
 .endd
-For example, the safest way to write the NIS+ query is
+For example, the way to write the NIS+ query is
 .code
 [name="${quote_nisplus:$local_part}"]
 .endd
+.cindex "tainted data" "in lookups"
+.new
+&*All*& tainted data used in a quoery-style lookup must be quoted
+using a mechanism appropriate for the lookup type.
+.wen
 See chapter &<<CHAPexpand>>& for full coverage of string expansions. The quote
 operator can be used for all lookup types, but has no effect for single-key
 lookups, since no quoting is ever needed in their key strings.