[HECnet] Security hole in CSWS

John Wilson wilson at dbit.com
Tue Sep 22 23:46:35 PDT 2009


From: Sampsa Laine <sampsa at mac.com>

Any other separator legal for version numbers? Am I missing anything   
else?

Surely I'm showing my ignorance of both VMS and Apache, but does your
regex handle a version # with no digits at all?   As in "FOO.TXT;" ?
That certainly *used* to be a valid filename, back in V4/V5 days anyway,
just want to make sure it's covered.

John Wilson
D Bit



More information about the Hecnet-list mailing list