[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: wget2 | wget -r --no-host-directories in $HOME should be taken care

From: Tim Rühsen
Subject: Re: wget2 | wget -r --no-host-directories in $HOME should be taken care of (#489)
Date: Wed, 13 Nov 2019 11:20:34 +0000

Tim Rühsen commented:

> Similar situations can arise from running "wget --recursive
> --no-directories" in the home directory. In this case, I don't think we
> should work to avoid server-chosen names, since that's a fundamental
> functionality change to wget, and in any case can't realistically be
> done (I see your patch doesn't try). Instead, for this case we should
> probably add something to the documentation for --no-directories warning
> that you shouldn't use it if wget will be placing files directly in your
> home directory or a similar sensitive location.

It says that --recursive implies server-chosen names (what i said above). So 
from the security standpoint, nothing speaks against implicit 

It also says that there should be a warning about placing files into $HOME in 
case of using --no-directories. I can't see this warning in the man page.

Reply to this email directly or view it on GitLab: 
You're receiving this email because of your account on gitlab.com.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]