exec: don't use shell by default when executing commands (for security reasons)

It is possible to force shell by default with this command:
/set exec.command.default_options "-sh"

12 files changed, 68 insertions, 53 deletions

diff --git a/po/cs.po b/po/cs.po
index 2e3700f42..6e1187794 100644
--- a/po/cs.po
+++ b/po/cs.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:06+0100\n"
 "Last-Translator: Jiri Golembiovsky <golemj@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -4631,10 +4631,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/de.po b/po/de.po
index 96f703302..e2d599350 100644
--- a/po/de.po
+++ b/po/de.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-16 14:05+0100\n"
 "Last-Translator: Nils Görs <weechatter@arcor.de>\n"
 "Language-Team: German <weechatter@arcor.de>\n"
@@ -45,11 +45,11 @@ msgid "max chars"
 msgstr "maximale Zeichenanzahl"
 
 msgid ""
-"a WeeChat color name (default, black, (dark)gray, white, (light)red, (light)"
-"green, brown, yellow, (light)blue, (light)magenta, (light)cyan), a terminal "
-"color number or an alias; attributes are allowed before color (for text "
-"color only, not background): \"*\" for bold, \"!\" for reverse, \"/\" for "
-"italic, \"_\" for underline"
+"a WeeChat color name (default, black, (dark)gray, white, (light)red, "
+"(light)green, brown, yellow, (light)blue, (light)magenta, (light)cyan), a "
+"terminal color number or an alias; attributes are allowed before color (for "
+"text color only, not background): \"*\" for bold, \"!\" for reverse, \"/\" "
+"for italic, \"_\" for underline"
 msgstr ""
 "ein Farbname für WeeChat (default, black, (dark)gray, white, (light)red, "
 "(light)green, brown, yellow, (light)blue, (light)magenta, (light)cyan), eine "
@@ -5153,9 +5153,9 @@ msgid ""
 "suggestions in all languages)"
 msgstr ""
 "legt die Anzahl an Vorschlägen, für ein falsch geschriebenes Wort, fest. Die "
-"Vorschläge werden mittels der Bar-Item \"aspell_suggest\", für die jeweilige"
-"(n) Sprache(n), die für den Buffer augewählt wurden, angezeigt (-1 = "
-"deaktiviert die Funktion, 0 = zeigt alle verfügbaren Vorschläge, für alle "
+"Vorschläge werden mittels der Bar-Item \"aspell_suggest\", für die "
+"jeweilige(n) Sprache(n), die für den Buffer augewählt wurden, angezeigt (-1 "
+"= deaktiviert die Funktion, 0 = zeigt alle verfügbaren Vorschläge, für alle "
 "ausgewählten Sprachen, an)"
 
 msgid ""
@@ -5340,12 +5340,14 @@ msgstr ""
 "<signal> || -kill <id> || -killall || -set <id> <property> <value> || -del "
 "<id>|-all [<id>...]"
 
+#, fuzzy
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
@@ -6096,8 +6098,8 @@ msgstr ""
 "werden)\n"
 "            - Hostname/Port oder IP/Port (damit wird lediglich ein "
 "TEMPORÄRER Server erstellt), Port 6667 wird standardmäßig verwendet\n"
-"            - URL mit folgendem Format: irc[6][s]://[nickname[:password]@]"
-"irc.example.org[:port][/#channel1][,#channel2[...]]\n"
+"            - URL mit folgendem Format: irc[6][s]://[nickname[:"
+"password]@]irc.example.org[:port][/#channel1][,#channel2[...]]\n"
 "    option: legt Option für den Server fest (die Boolean-Optionen können "
 "weggelassen werden)\n"
 "  nooption: deaktiviert eine Boolean Option (Beispiel: -nossl)\n"
@@ -11241,8 +11243,8 @@ msgid ""
 "Examples (you can also look at default triggers with /trigger listdefault):\n"
 "  add text attributes *bold*, _underline_ and /italic/ (only in user "
 "messages):\n"
-"    /trigger add effects modifier weechat_print \"${tg_tag_nick}\" \"==\\*"
-"(\\S+)\\*==*${color:bold}$1${color:-bold}*== ==_(\\S+)_==_${color:"
+"    /trigger add effects modifier weechat_print \"${tg_tag_nick}\" \"=="
+"\\*(\\S+)\\*==*${color:bold}$1${color:-bold}*== ==_(\\S+)_==_${color:"
 "underline}$1${color:-underline}_== ==/(\\S+)/==/${color:italic}$1${color:-"
 "italic}/\"\n"
 "  hide nicklist bar on small terminals:\n"
@@ -11325,8 +11327,8 @@ msgstr ""
 "trigger listdefault\" anzeigen lassen):\n"
 "  fügt einer Nachricht die Textattribute *fett*, _unterstrichen_ und /"
 "kursiv/ hinzu:\n"
-"    /trigger add effects modifier weechat_print \"${tg_tag_nick}\" \"==\\*"
-"(\\S+)\\*==*${color:bold}$1${color:-bold}*== ==_(\\S+)_==_${color:"
+"    /trigger add effects modifier weechat_print \"${tg_tag_nick}\" \"=="
+"\\*(\\S+)\\*==*${color:bold}$1${color:-bold}*== ==_(\\S+)_==_${color:"
 "underline}$1${color:-underline}_== ==/(\\S+)/==/${color:italic}$1${color:-"
 "italic}/\"\n"
 "  verbirgt die Nicklist auf kleineren Terminals:\n"
diff --git a/po/es.po b/po/es.po
index 6e129f24e..4ec48d64b 100644
--- a/po/es.po
+++ b/po/es.po
@@ -22,7 +22,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: Elián Hanisch <lambdae2@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -4846,10 +4846,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/fr.po b/po/fr.po
index 82054a0c5..318b18a17 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -21,8 +21,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
-"PO-Revision-Date: 2014-03-17 07:12+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
+"PO-Revision-Date: 2014-03-17 14:57+0100\n"
 "Last-Translator: Sébastien Helleu <flashcode@flashtux.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
 "Language: fr\n"
@@ -5212,10 +5212,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
@@ -5277,10 +5278,12 @@ msgid ""
 "  /exec -pipe \"/print Machine uptime:\" uptime"
 msgstr ""
 "    -list: lister les commandes\n"
-"      -sh: utiliser le shell pour exécuter la commande (par défaut)\n"
+"      -sh: utiliser le shell pour exécuter la commande (ATTENTION : utilisez "
+"cette option SEULEMENT si tous les paramètres sont des données fiables, voir "
+"l'option -nosh)\n"
 "    -nosh: ne pas utiliser le shell pour exécuter la commande (requis si la "
 "commande a des données non fiables, par exemple le contenu d'un message d'un "
-"autre utilisateur)\n"
+"autre utilisateur) (par défaut)\n"
 "      -bg: lancer le processus en tâche de fond : ne pas afficher la sortie "
 "ni le code retour (non compatible avec les options -o/-n)\n"
 "    -nobg: capturer la sortie du processus et afficher le code retour (par "
diff --git a/po/hu.po b/po/hu.po
index ca4a24464..d3e929dd4 100644
--- a/po/hu.po
+++ b/po/hu.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: Andras Voroskoi <voroskoi@frugalware.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -4220,10 +4220,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/it.po b/po/it.po
index 85824cc16..89698d592 100644
--- a/po/it.po
+++ b/po/it.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: Esteban I. Ruiz Moreno <exio4.com@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -4984,10 +4984,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/ja.po b/po/ja.po
index 58c1e67a1..75a6b26ee 100644
--- a/po/ja.po
+++ b/po/ja.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: AYANOKOUZI, Ryuunosuke <i38w7i3@yahoo.co.jp>\n"
 "Language-Team: Japanese <https://github.com/l/WeeChat>\n"
@@ -4991,10 +4991,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/pl.po b/po/pl.po
index 23b05ac8a..aeccae3f9 100644
--- a/po/pl.po
+++ b/po/pl.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: Krzysztof Korościk <soltys@szluug.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -5103,10 +5103,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/pt_BR.po b/po/pt_BR.po
index 07671f1b8..f3921688d 100644
--- a/po/pt_BR.po
+++ b/po/pt_BR.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: Sergio Durigan Junior <sergiosdj@gmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -4687,10 +4687,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/ru.po b/po/ru.po
index 413926694..3ef354344 100644
--- a/po/ru.po
+++ b/po/ru.po
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: Aleksey V Zapparov AKA ixti <ixti@member.fsf.org>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -4253,10 +4253,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/tr.po b/po/tr.po
index 1041c639d..34d228f94 100644
--- a/po/tr.po
+++ b/po/tr.po
@@ -20,7 +20,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2014-03-10 21:07+0100\n"
 "Last-Translator: Hasan Kiran <sunder67@hotmail.com>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -3809,10 +3809,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"
diff --git a/po/weechat.pot b/po/weechat.pot
index 36355640b..a6ce25f79 100644
--- a/po/weechat.pot
+++ b/po/weechat.pot
@@ -21,7 +21,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat 0.4.1-dev\n"
 "Report-Msgid-Bugs-To: flashcode@flashtux.org\n"
-"POT-Creation-Date: 2014-03-16 10:13+0100\n"
+"POT-Creation-Date: 2014-03-17 14:56+0100\n"
 "PO-Revision-Date: 2013-02-14 18:20+0100\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: weechat-dev <weechat-dev@nongnu.org>\n"
@@ -3809,10 +3809,11 @@ msgstr ""
 
 msgid ""
 "   -list: list commands\n"
-"     -sh: use the shell to execute the command (default)\n"
+"     -sh: use the shell to execute the command (WARNING: use this option "
+"ONLY if all arguments are safe date, see option -nosh)\n"
 "   -nosh: do not use the shell to execute the command (required if the "
 "command has some unsafe data, for example the content of a message from "
-"another user)\n"
+"another user) (default)\n"
 "     -bg: run process in background: do not display process output neither "
 "return code (not compatible with options -o/-n)\n"
 "   -nobg: catch process output and display return code (default)\n"