forked from lix-project/lix
Robert Hensing
b7ce11c97d
As discussed in the maintainer meeting on 2024-01-29.
Mainly this is to avoid a situation where the name is parsed and
treated as a file name, mostly to protect users.
.-* and ..-* are also considered invalid because they might strip
on that separator to remove versions. Doesn't really work, but that's
what we decided, and I won't argue with it, because .-* probably
doesn't seem to have a real world application anyway.
We do still permit a 1-character name that's just "-", which still
poses a similar risk in such a situation. We can't start disallowing
trailing -, because a non-zero number of users will need it and we've
seen how annoying and painful such a change is.
What matters most is preventing a situation where . or .. can be
injected, and to just get this done.
(cherry picked from commit f1b4663805a9dbcb1ace64ec110092d17c9155e0)
Change-Id:
|
||
|---|---|---|
| .. | ||
| rl-next | ||
| rl-next-dev | ||
| src | ||
| theme | ||
| anchors.jq | ||
| book.toml | ||
| custom.css | ||
| generate-builtin-constants.nix | ||
| generate-builtins.nix | ||
| generate-deps.py | ||
| generate-manpage.nix | ||
| generate-xp-features-shortlist.nix | ||
| generate-xp-features.nix | ||
| json-to-tree.py | ||
| local.mk | ||
| meson.build | ||
| process-includes.sh | ||
| quote-literals.xsl | ||
| redirects.js | ||
| render-manpage.sh | ||
| substitute.py | ||
| utils.nix | ||