W3C home > Mailing lists > Public > ietf-http-wg@w3.org > January to March 2011

Content-Location: path separator characters

From: Mark Nottingham <mnot@mnot.net>
Date: Thu, 10 Feb 2011 11:32:31 +1100
Message-Id: <9511C7C5-920A-4350-ABA4-896A16D589AC@mnot.net>
Cc: "Julian F. Reschke" <julian.reschke@gmx.de>
To: httpbis Group <ietf-http-wg@w3.org>
Section 3.3 Disposition Parameter: 'Filename' says

"""
When the value contains path separator characters, all but the last segment SHOULD be ignored. This prevents unintentional overwriting of well-known file system location (such as "/etc//passwd").
"""

However, "path separator characters" is not defined; should this be platform-specific, or should we nominate the characters in question? Either way, it needs to be more explicit.

Nit: the end of the quoted sentence above should be "... well-known file system locations ... "

--
Mark Nottingham   http://www.mnot.net/
Received on Thursday, 10 February 2011 00:33:05 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:36 GMT