Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fileserver: Reject ADS and short name paths; trim trailing dots and spaces on Windows #5148

Merged
merged 7 commits into from
Oct 19, 2022

Conversation

mholt
Copy link
Member

@mholt mholt commented Oct 14, 2022

I didn't even know about these Windows "features" (actually, I knew about short names as I grew up with them, but didn't know they were still a thing... ugh) that, along with suffixing filenames with spaces and dots, allow an arbitrary number of variants to transparently refer to the same file on Windows NTFS.

Thanks to Adrian Denkiewicz of Doyensec for reporting this.

@mholt mholt added bug 🐞 Something isn't working os/windows 🗑️ Windows-specific labels Oct 14, 2022
@mholt mholt added this to the v2.6.3 milestone Oct 14, 2022
Windows ignores trailing dots and spaces in filenames.
@mholt mholt changed the title fileserver: Reject ADS and short name paths fileserver: Reject ADS and short name paths; trim trailing dots and spaces on Windows Oct 14, 2022
@mholt mholt merged commit 4bf6cb4 into master Oct 19, 2022
@mholt mholt deleted the windows-staticfiles branch October 19, 2022 03:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug 🐞 Something isn't working os/windows 🗑️ Windows-specific
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant