Re: [Bug-XBoard] Security concern

[h.g. muller]

> Please, as a matter of urgency, create a new release addressing this problem.

Is this an installer problem, or do you want changes in winboard.exe itself?
If a user has normally no access rights where WinBoard is installed by default,
it would be logical if he installs it in a location where he has. The WinBoard
instaler allows the user to specify the install path.

The latest development version allows a system-wide settings file to specify
a new settings file (where additionl settings will be read, and wherethey will
be written). In XBoard this is used to 'redirect' the settings file to 
~/.xboard.

In principle this should work with WinBoard too. The question is if there
are such generic pathnames like the Linux ~ in Windows that would expand
to a user-dependent path. If the string you mention \%HOMEPATH%\ is
fed to the Windows call SearchPath, is it automatically understood
by the system?