diff options
author | Daniel Stenberg <daniel@haxx.se> | 2010-09-16 23:11:48 +0200 |
---|---|---|
committer | Daniel Stenberg <daniel@haxx.se> | 2010-10-12 22:56:21 +0200 |
commit | 81f151c912105ded480c3c88a1be53ca345298a1 (patch) | |
tree | a39733015b4fb59728ba836cb352f02d241b9ead /lib/polarssl.c | |
parent | b80490641414983404eda65095224535a41a12ec (diff) |
header_callback: strip off file path separated with backslashes
If the filename contains a backslash, only use filename portion. The
idea is that even systems that don't handle backslashes as path
separators probably want that path removed for convenience.
This flaw is considered a security problem, see the curl security
vulnerability http://curl.haxx.se/docs/adv_20101013.html
Diffstat (limited to 'lib/polarssl.c')
0 files changed, 0 insertions, 0 deletions