W3C home > Mailing lists > Public > ietf-http-wg@w3.org > January to March 2011

Re: Content-Location: path separator characters [#272]

From: Mark Nottingham <mnot@mnot.net>
Date: Thu, 10 Feb 2011 11:38:54 +1100
Cc: "Julian F. Reschke" <julian.reschke@gmx.de>
Message-Id: <AC5382B1-674C-4358-BF78-E3024ED5F2A8@mnot.net>
To: httpbis Group <ietf-http-wg@w3.org>
Sorry, should have said -- this is #272.


On 10/02/2011, at 11:32 AM, Mark Nottingham wrote:

> Section 3.3 Disposition Parameter: 'Filename' says
> 
> """
> When the value contains path separator characters, all but the last segment SHOULD be ignored. This prevents unintentional overwriting of well-known file system location (such as "/etc//passwd").
> """
> 
> However, "path separator characters" is not defined; should this be platform-specific, or should we nominate the characters in question? Either way, it needs to be more explicit.

--
Mark Nottingham   http://www.mnot.net/
Received on Thursday, 10 February 2011 00:39:25 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:36 GMT