clipka wrote:
>> STOP, that is no bug, that is by design!
> 
> What? You mean that it strips any "../.." ???

One would think that at worst the bug would be "it silently gives the wrong 
result instead of reporting an error."

If the intention is to disallow ".." at the start of the string for security 
purposes, it should give an error rather than point at a different file 
(which would be its own security problem right there).  If it's not 
security-related, I'm really curious how this could be considered a feature.

-- 
Darren New, San Diego CA, USA (PST)
  "How did he die?"   "He got shot in the hand."
     "That was fatal?"
          "He was holding a live grenade at the time."

Post a reply to this message