[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Muddleftpd-users] features, ideas, etc

From: muddleftpd-users-admin
Subject: Re: [Muddleftpd-users] features, ideas, etc
Date: Thu, 24 Oct 2002 06:47:03 +0200
User-agent: Mutt/1.4i

On Wednesday, October 23, 2002 at 22:05, Joerg Jaspert wrote:
> >   Files with non-printable characters cannot be CD'd to
> >     Muddleftpd strips all non-printable characters from
> >     user commands, therefore it is possible to list these
> >     directories/files but not CDing to/downloading them.
> >     One solution would be to have muddleftpd use the current
> >     locale and use isprint. But I think a better solution
> >     would be to simply strip nothing.
> Strip nothing is bad. Leads to the Translate/escape...." above.
> We want to be sure that everything muddleftpd does is secure, so we
> need to inspect the data we get from the user.

Ok, but the problem is that muddleftpd strips printable
international (e.g. ISO-8859-1) characters.

If some commands gets confused by these characters, isn't the
problem in that command rather than the "protocol parser" that
strips or doesn't strip?


Oskar (address@hidden)

reply via email to

[Prev in Thread] Current Thread [Next in Thread]