On Tue, Oct 04, 2016 at 12:16:40PM -0700, Brendan Cully wrote:
> 
> Preserve forwarded attachment names in d_filename.
> 
> When forwarding an attachment with an non-ascii name, mutt_copy_body()
> mangles the filename when calling mutt_adv_mktemp.  Preserve
> the original attachment filename in d_filename.

Are there any security implications to this? Are there any characters
that should absolutely be sanitized in the filename?

w

Reply via email to