John Rudd wrote:

> Frankly, making the message subject be the "file name" is itself "total
> braindeath".

Indeed... I go crazy when software does that.  If you know you will be
running on totally broken platforms that encode metadata into the file name,
it's highly irresponsible to let an attacker choose the file name.

Regards,

David.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to