Mercurial > gftp.yaz
comparison ChangeLog @ 666:8ff1c1647b95
2005-1-18 Brian Masney <masneyb@gftp.org>
* lib/protocols.c (gftp_get_next_file) - if the remote server sends a
path with the filename, then strip the path off of the filename. If the
path didn't match the current directory, then give the user a warning.
A malicious server could change the path of the downloaded by adding
/../ to the path
| author | masneyb |
|---|---|
| date | Wed, 19 Jan 2005 01:56:48 +0000 |
| parents | 2d3ea4db3106 |
| children | 6b6fbcf76d00 |
comparison
equal
deleted
inserted
replaced
| 665:ee326bacf8aa | 666:8ff1c1647b95 |
|---|---|
| 1 2005-1-18 Brian Masney <masneyb@gftp.org> | |
| 2 * lib/protocols.c (gftp_get_next_file) - if the remote server sends a | |
| 3 path with the filename, then strip the path off of the filename. If the | |
| 4 path didn't match the current directory, then give the user a warning. | |
| 5 A malicious server could change the path of the downloaded by adding | |
| 6 /../ to the path | |
| 7 | |
| 1 2005-1-16 Brian Masney <masneyb@gftp.org> | 8 2005-1-16 Brian Masney <masneyb@gftp.org> |
| 2 * configure.in lib/Makefile.am src/gtk/Makefile.am src/text/Makefile.am | 9 * configure.in lib/Makefile.am src/gtk/Makefile.am src/text/Makefile.am |
| 3 lib/fsp.c - added FSP to the build system | 10 lib/fsp.c - added FSP to the build system |
| 4 | 11 |
| 5 * lib/fsp.c - removed unused variables | 12 * lib/fsp.c - removed unused variables |
| 3222 | 3229 |
| 3223 * configure.in - link in gthread | 3230 * configure.in - link in gthread |
| 3224 | 3231 |
| 3225 * cvsclean - added this script | 3232 * cvsclean - added this script |
| 3226 | 3233 |
| 3227 * *.[ch] - added $Id: ChangeLog,v 1.393 2005/01/16 16:15:04 masneyb Exp $ tags | 3234 * *.[ch] - added $Id: ChangeLog,v 1.394 2005/01/19 01:56:48 masneyb Exp $ tags |
| 3228 | 3235 |
| 3229 * debian/* - updated files from Debian maintainer | 3236 * debian/* - updated files from Debian maintainer |
| 3230 | 3237 |
| 3231 2002-10-03 Brian Masney <masneyb@gftp.org> | 3238 2002-10-03 Brian Masney <masneyb@gftp.org> |
| 3232 * src/gtk/gftp-gtk.c - call g_thread_init (NULL) | 3239 * src/gtk/gftp-gtk.c - call g_thread_init (NULL) |