Opened at 2011-02-02T01:05:51Z
Last modified at 2014-12-02T19:44:36Z
#1350 assigned defect
SFTP: clients may misparse directory listings with filenames containing unusual characters — at Initial Version
| Reported by: | davidsarah | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | soon |
| Component: | code-frontend-ftp-sftp | Version: | 1.8.2 |
| Keywords: | sftp names | Cc: | |
| Launchpad Bug: |
Description
For example, FileZilla misparses filenames containing CR (U+000D), such as "blamp \r$(curl noncombatant.org)" currently in the public directory of the test grid. It appears to treat the characters after the \r as a separate line (judging from the Message log when 'Edit menu | Settings... | Debug | Show raw directory listing' is checked).
I think we should be stripping out children with names containing characters below U+0020 when found in a directory, and rejecting attempts to create them. See also #731.
Note: See
TracTickets for help on using
tickets.
