Re: [hackers] ubase musl

2020-03-25 Thread k0ga
On Sat, Mar 21, 2020 at 12:23:51PM -0700, Michael Forney wrote: > On 2020-01-5, spaceman wrote: > > ubase won't compile with musl later than 1.1.23 because it lacks the > > major, minor and makedev function. Added the necessary include to make > > it compile. > > Yes, this is a known issue. I

[hackers] [quark] Properly HTML-escape names in dirlistings || Laslo Hunhold

2020-03-25 Thread git
commit 48e74a598247f4b81e09a0f652faf15163f9f525 Author: Laslo Hunhold AuthorDate: Wed Mar 25 14:07:17 2020 +0100 Commit: Laslo Hunhold CommitDate: Wed Mar 25 14:07:17 2020 +0100 Properly HTML-escape names in dirlistings Based on a patch by guysv. We now make sure that the

Re: [hackers] [quark][PATCH] HTML-escape dirlist dynamic content

2020-03-25 Thread Laslo Hunhold
On Tue, 10 Mar 2020 19:52:17 +0200 guysv wrote: Dear guysv, > Because ",',<,>,& are all valid unix filename characters, > filenames containing those characters can glitch-out a dirlist > response. > > A funny example would be: > "> > This commit escapes dynamic input, and fixes the bug.