Mercurial > gftp.yaz
annotate debian/gftp-gtk.menu @ 666:8ff1c1647b95
2005-1-18 Brian Masney <masneyb@gftp.org>
* lib/protocols.c (gftp_get_next_file) - if the remote server sends a
path with the filename, then strip the path off of the filename. If the
path didn't match the current directory, then give the user a warning.
A malicious server could change the path of the downloaded by adding
/../ to the path
| author | masneyb |
|---|---|
| date | Wed, 19 Jan 2005 01:56:48 +0000 |
| parents | becc8fbd327f |
| children | 2311d02b07bc |