David Levine <[email protected]> writes: > Jón wrote: > >> Background: I’m using mhstore in a script to automatically >> extract images and text from messages. Since the messages come >> from and results go to naïve users, I’d like to be able to use >> the original file basenames so that they recognise what they >> sent. >> >> -auto isn’t desirable because it completely ignores the filename >> if there’s anything dodgy about it. > > Specifically, > > For security reasons, this filename will be ignored if it > begins with the character '/', '.', '|', or '!', or if it > contains the character '%'. > > Is that necessary? Esp. with any of the non-default -clobber > settings. > > Would adding a switch to skip that check and allow any filename > help?
Not really. For my case, I wouldn’t want anything put into a subdirectory, and obeying anything beginning with .. would be a real nuisance! I just want to extract enough of the filename so that the sender can recognise it (with reasonably high probability :-) — Jón -- Jón Fairbairn [email protected] _______________________________________________ Nmh-workers mailing list [email protected] https://lists.nongnu.org/mailman/listinfo/nmh-workers
