Re: fetch extension - use local filename from content-dispositionheader (new diff)

On Fri, Dec 30, 2005 at 02:28:48PM -0500, Martin Cracauer wrote:
> The content-disposition header is a standard web feature that we have
> no good reason to ignore (as long as we don't turn it on unless
> directly user-requested).  We are just advancing with web technology,
> which partly moves from explicit naming in URLs to simpler (for them)
> schemes.

There is easy way to make most security hackarounds unneeded in the way 
like every browser does: confirm final file name interactively. I.e. fetch 
can do something like this:

Save as filename.exe (Y/N)?

-- 
http://ache.pp.ru/