Merge branch '1.9.x'

manual/running.html

@@ -525,11 +525,11 @@ on the platform and the JVM implementation.</p>
 
 <p><b>Security Note:</b> Using the default temporary directory
 specified by <code>java.io.tmpdir</code> can result in the leakage of
-sensitive information or possibly allow an attacker to execute
-arbitrary code. This is especially true in multi-user environments. It
-is recommended that <code>ant.tmpdir</code> be set to a directory
-owned by the user running Ant with 0700 permissions. Ant 1.10.8 and
-later will try to make temporary files created by it only
+sensitive information or possibly allow an attacker to inject source
+files into the build process. This is especially true in multi-user
+environments. It is recommended that <code>ant.tmpdir</code> be set to
+a directory owned by the user running Ant with 0700 permissions. Ant
+1.10.8 and later will try to make temporary files created by it only
 readable/writable by the current user but may silently fail to do so
 depending on the OS and filesystem.</p>