New posts in shellshock-bash-bug

Is the behavior behind the Shellshock vulnerability in Bash documented or at all intentional?

bash function security environment-variables shellshock-bash-bug