2012/06/29 6:43 "Daniel Stenberg" <daniel_at_haxx.se>:
>
> On Thu, 28 Jun 2012, Tatsuhiro Tsujikawa wrote:
>
>> I changed libmetalink code not to allow '.' in the first character in
path or filename following the last slash.
>
>
> What about "../" occurances? Like a file name called
"/home/../../etc/passwd" ...
>

They are treated as invalid too in libmetalink. See test2016.

Best regards,

Tatsuhiro Tsujikawa

> --
>
> / daniel.haxx.se
>
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/list/listinfo/curl-users
> FAQ: http://curl.haxx.se/docs/faq.html
> Etiquette: http://curl.haxx.se/mail/etiquette.html

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2012-06-29