[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Nmh-workers] mhstore RFE: add facility to manipulate the original f
From: |
Jon Fairbairn |
Subject: |
Re: [Nmh-workers] mhstore RFE: add facility to manipulate the original filename |
Date: |
Sun, 01 Jun 2014 08:36:59 +0100 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/23.1 (gnu/linux) |
David Levine <address@hidden> writes:
> Jón wrote:
>
>> Background: I’m using mhstore in a script to automatically
>> extract images and text from messages. Since the messages come
>> from and results go to naïve users, I’d like to be able to use
>> the original file basenames so that they recognise what they
>> sent.
>>
>> -auto isn’t desirable because it completely ignores the filename
>> if there’s anything dodgy about it.
>
> Specifically,
>
> For security reasons, this filename will be ignored if it
> begins with the character '/', '.', '|', or '!', or if it
> contains the character '%'.
>
> Is that necessary? Esp. with any of the non-default -clobber
> settings.
>
> Would adding a switch to skip that check and allow any filename
> help?
Not really. For my case, I wouldn’t want anything put into a
subdirectory, and obeying anything beginning with .. would be a
real nuisance! I just want to extract enough of the filename so
that the sender can recognise it (with reasonably high
probability :-)
— Jón
--
Jón Fairbairn address@hidden