NetBSD/usr.bin/ftp
lukem b918fc0803 Forbid filenames returned from mget that aren't in (or below) the
current directory.
The previous behaviour (of trusting the remote server's response when
retrieving the list of files to mget with prompting disabled) has been
in ftp ~forever, and has been a "known issue" for a long time.
Recently an advisory was published by D.J. Bernstein on behalf of
Yosef Klein warning of the problems with the previous behaviour, so
to alleviate concern I've fixed this with a sledgehammer.

Remember the local cwd after any operation which may change it.
Use "remotecwd" instead of "remotepwd".
2005-01-03 09:50:09 +00:00
..
Makefile Save approximately 8K by not including http authentication, extended status 2004-06-06 01:37:41 +00:00
cmds.c Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
cmdtab.c Fix bug in Christos' recent cleanup which broke the "help" and "rhelp" commands. 2004-07-15 08:50:10 +00:00
complete.c
domacro.c
extern.h Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
fetch.c * Always decode %xx in a url's user & pass components. 2004-12-10 06:44:15 +00:00
ftp.1 Fix typo. 2004-12-01 12:03:55 +00:00
ftp.c If an ftp auto-fetch transfer is interrupted by SIGINT (usually ^C), 2004-07-20 10:40:21 +00:00
ftp_var.h Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
main.c Slightly rework SIGINT handling; if we're exiting the auto-fetch stuff 2004-07-21 00:09:14 +00:00
progressbar.c Allow custom text printed before (left of) the progress bar from progress(1): 2004-03-09 17:04:24 +00:00
progressbar.h Allow custom text printed before (left of) the progress bar from progress(1): 2004-03-09 17:04:24 +00:00
ruserpass.c
util.c Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00
version.h Forbid filenames returned from mget that aren't in (or below) the 2005-01-03 09:50:09 +00:00