mirror of
https://github.com/kovidgoyal/kitty
synced 2026-07-24 01:08:10 +02:00
Fix insufficient sanitization of safe strings in file transfer protocol
Change the spec to restrict safe strings further to avoid such bugs in other implementations. Reported by Edwin Hoffman.
This commit is contained in:
@@ -508,7 +508,7 @@ enum
|
||||
ac=file
|
||||
|
||||
safe_string
|
||||
A string consisting only of characters from the set ``[0-9a-zA-Z_:.,/!@#$%^&*()[]{}~`?"'\\|=+-]``
|
||||
A string consisting only of characters from the set ``[0-9a-zA-Z_:./@-]``
|
||||
Note that the semi-colon is missing from this set.
|
||||
|
||||
integer
|
||||
|
||||
Reference in New Issue
Block a user