[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Also. mfs.cgi



Is breaking on files with spaces in the name.
Claims access is denied, but it looks like it is failing to convert %20 
back to " " 
Will look at code.

I'll also have to checking on some other escaped characters people were 
putting in file names, like ","  - might even be worth while doing a 
split on any non-(alphanumeric+".") and convert it to hex code, just 
because theoretically any file name could be allowed and some of the html 
generating software we use is rather idiotic in the names it creates.
I wonder if \0 could be used as a separator instead of current \t ...  or 
even a multi-character separator.