Re: [dev] security issue running surf from home folder

From: Dmitrij D. Czarkoff <>
Date: Fri, 9 Jan 2015 03:16:51 +0100

Christoph Lohmann said:
> Theses patches have been discussed on IRC. The optimal solution has been
> to make the default DOWNLOAD macro to ask for a string. If the string is
> empty, pass ‐O to curl, if it’s non‐empty add ‐‐create‐dirs and ‐o
> $string to curl.
> Any comments on this?

If prompt is shown, it would be nice to have an option to abort download
at this point. Otherwise every flash ad gets downloaded without any
sort of confirmation.

Dmitrij D. Czarkoff
Received on Fri Jan 09 2015 - 03:16:51 CET

This archive was generated by hypermail 2.3.0 : Fri Jan 09 2015 - 03:24:07 CET