Re: fetch extension - use local filename from content-disposition header

From: Dag-Erling Smørgrav <des_at_des.no>
Date: Fri, 30 Dec 2005 10:08:12 +0100
Martin Cracauer <cracauer_at_cons.org> writes:
> The security implications are about the same as for the base
> functionality.  Any filename in the current directory can be wiped
> out if you fetch or wget and a URL redirects to another URL which
> leads to a filename that matches.

No.  Fetch uses the original filename as specified on the command
line.  Redirects are handled behind the scenes by libfetch.

> The default behavior already *is* that the sending server has control
> over your local naming.

No.

DES
-- 
Dag-Erling Smørgrav - des_at_des.no
Received on Fri Dec 30 2005 - 08:08:18 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:49 UTC