open https://gitlab.synchro.net/main/sbbs/-/issues/710

As I've been working on my news reader door for Synchronet (in JS), I've recently noticed something else about console.editfile(). I've been using that to allow the user to edit a message just before posting it in a newsgroup. I now have my news reader writing a QUOTES.TXT in the user's node directory so that the message editor can read that and allow the user to quote the message they're replying to. However, I've noticed that when console.editfile() is called, QUOTES.TXT is deleted (thus, the editor is unable to quote any of the message). I'm wondering if that's by design? If so, is there (or could there be) a way to have it not delete QUOTES.TXT when console.editfile() is called?
--- SBBSecho 3.20-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

https://gitlab.synchro.net/main/sbbs/-/issues/710#note_4762

Yeah, it's by design. The quotes.txt could contain data from a previous file/message editing session, thus potentially a security/privacy problem.

I can make an option to *not* delete it, but then the security problem will become yours to deal with.

One possible work-around would be to places the quotes file in the node's temporary file directory, which is cleaned between connections, but that likely will break compatibility with existing message editors that assumes it's in the node directory.
--- SBBSecho 3.20-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)

close https://gitlab.synchro.net/main/sbbs/-/issues/710
--- SBBSecho 3.20-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)