Re: [Muddleftpd-users] features, ideas, etc

[muddleftpd-users-admin]

On Wednesday, October 23, 2002 at 22:05, Joerg Jaspert wrote:
> >   Files with non-printable characters cannot be CD'd to
> >     Muddleftpd strips all non-printable characters from
> >     user commands, therefore it is possible to list these
> >     directories/files but not CDing to/downloading them.
> >     One solution would be to have muddleftpd use the current
> >     locale and use isprint. But I think a better solution
> >     would be to simply strip nothing.
> 
> Strip nothing is bad. Leads to the Translate/escape...." above.
> We want to be sure that everything muddleftpd does is secure, so we
> need to inspect the data we get from the user.

Ok, but the problem is that muddleftpd strips printable
international (e.g. ISO-8859-1) characters.

If some commands gets confused by these characters, isn't the
problem in that command rather than the "protocol parser" that
strips or doesn't strip?

Regards,

Oskar (address@hidden)