On Sun, Apr 19, 2026 at 08:49:03AM +0200, Alejandro Colomar via Mutt-dev wrote:
On 2026-04-19T13:52:45+0800, Kevin J. McCarthy wrote:
Consider %00 an invalid character in a URL.

Thanks to [email protected] for the security report.

This still has the tab/spaces indentation difference with surrounding
code.  (I don't care; it's just in case you missed it.)

Still, since that's unimportant in stable:

Reviewed-by: Alejandro Colomar <[email protected]>

Pushed to stable.  Merged into master, adjusting for the tab-to-spaces
conversion done in master.

--
Kevin J. McCarthy
GPG Fingerprint: 8975 A9B3 3AA3 7910 385C  5308 ADEF 7684 8031 6BDA

Attachment: signature.asc
Description: PGP signature

Reply via email to