Matthew White 43ec7008f2 Enforce Metalink file name verification, strip directory if necessary ... * NEWS: Mention the use of a safe Metalink destination path * src/metalink.h: Add declaration of functions get_metalink_basename(), last_component(), metalink_check_safe_path() * src/metalink.c: Add directive #include "dosname.h" * src/metalink.c: Add function get_metalink_basename() to return the basename of a file name, strip w32's drive letter prefixes * src/metalink.c (retrieve_from_metalink): Enforce Metalink file name verification, if the file name is unsafe try its basename * doc/metalink.txt: Update document. Explain --directory-prefix The function get_metalink_basename() uses FILE_SYSTEM_PREFIX_LEN to catch any 'C:D:file' (w32 environment), then it removes each drive letter prefix, i.e. 'C:' and 'D:'. Unsafe file names contain an absolute, relative, or home path. Safe paths can be verified by libmetalink's metalink_check_safe_path().		2016-09-30 19:44:03 +02:00
..
fdl.texi	maint: update copyright year ranges to include 2015	2015-03-09 16:32:01 +01:00
Makefile.am	Fix creating docs when make uses 'sh -e'	2016-06-30 15:19:26 +02:00
metalink.txt	Enforce Metalink file name verification, strip directory if necessary	2016-09-30 19:44:03 +02:00
sample.wgetrc	sample.wgetrc: Fix wrong command 'locale' into 'localencoding'	2014-12-19 17:05:33 +01:00
texi2pod.pl	Convert wget.texi to UTF-8	2015-03-17 09:52:23 +01:00
wget.texi	Add --use-askpass=COMMAND support	2016-09-03 21:01:24 +02:00