Re: pre-announce exmh-2.7.2

Robert Elz <[email protected]>
Newsgroups gmane.mail.exmh.devel
Message-ID <[email protected]>
    Date:        Wed, 05 Jan 2005 08:32:32 -0800
    From:        Brent Welch <[email protected]>
    Message-ID:  <[email protected]>

  | file tail protects against filenames with any leading components.
  | 
  | set filename "foo;echo 'hibrent::0:0::::' >> /etc/passwd;baz"
  | 
  | file tail $filename
  | => passwd;baz

That's useless, the filename could just as easily be

	"foo;cd ..;cd ..;cd ..;cd ..;cd ..;cd ..;cd etc;echo '...' >>passwd;baz"

But, I wouldn't worry about this mind of nonsense, as long as creating the
file itself does no harm, worrying about what other (broken) applications
might do with "unusual" file names is way out of scope.

kre
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.