On Thu, Jun 25, 2020 at 11:14:27AM +0100, Jeremy Harris via Exim-users wrote:
> >  And I'm just curious, what a usage pattern was targeted to create two
> >  distinct filters "dir" and "subdir" with such small difference?
> 
> subdir for the usual case where you really do not want an
> attacker to be traversing upwards in your filesystem;
> dir for generality.

 Isn't it easier to remove "." and ".." from dsearch scan list et al?
 Really they are special built-in items in majority of file systems,
 so it's pointless to put real data into such "files" and consequently
 no sense to lookup it.
-- 
 Eugene Berdnikov

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to