Hi Valdis,
Also, if we're extending the functionality, we should include the
following checks:
1) Filter the pathname for .. and absolute pathnames - or possibly
totally ignore all path information and save the base filename in
Mail/
Have you seen mhstore(1)'s nmh-storage option? That may cover it.
2) Never automagically save a file with a name starting with '.'
Unless -auto is given then the filename provided by the sender is
ignored. It may be that mhstore's safety checks need improving, but it
does make an attempt already AFAICS.
But overwriting the file it's just created does seem broken.
Is there a wish/bug list on the go, or should I just use Debian's bug
tracker?
Cheers,
Ralph.
_______________________________________________
Nmh-workers mailing list
Nmh-workers(_at_)nongnu(_dot_)org
http://lists.nongnu.org/mailman/listinfo/nmh-workers