David Levine <levinedl(_at_)acm(_dot_)org> writes:
Jón wrote:
Background: I’m using mhstore in a script to automatically
extract images and text from messages. Since the messages come
from and results go to naïve users, I’d like to be able to use
the original file basenames so that they recognise what they
sent.
-auto isn’t desirable because it completely ignores the filename
if there’s anything dodgy about it.
Specifically,
For security reasons, this filename will be ignored if it
begins with the character '/', '.', '|', or '!', or if it
contains the character '%'.
Is that necessary? Esp. with any of the non-default -clobber
settings.
Would adding a switch to skip that check and allow any filename
help?
Not really. For my case, I wouldn’t want anything put into a
subdirectory, and obeying anything beginning with .. would be a
real nuisance! I just want to extract enough of the filename so
that the sender can recognise it (with reasonably high
probability :-)
— Jón
--
Jón Fairbairn
Jon(_dot_)Fairbairn(_at_)cl(_dot_)cam(_dot_)ac(_dot_)uk
_______________________________________________
Nmh-workers mailing list
Nmh-workers(_at_)nongnu(_dot_)org
https://lists.nongnu.org/mailman/listinfo/nmh-workers