Re: [Bug-wget] New option "--no-list-a"

[Tim Ruehsen]

On Friday 30 August 2013 11:39:41 Daniel Stenberg wrote:
> On Fri, 30 Aug 2013, Tim Ruehsen wrote:
> > Could you enlighten me about where '-a' comes from ? RFC 959 is very clear
> > that a param after LIST is either a filename or a directory name.
> 
> LIST -a basically works with the assumption that the server will detect that
> it looks like an option and run ls locally with that option. It is a flawed
> assumption and as you say not based on any FTP spec.

Uhhh, smells like vulnerabilities. The chances may be good to inject some 
shell code. But maybe not today anymore... nobody could resist and meanwhile 
all holes are fixed after the servers had been hacked :-)

Tim