1312427 matches found
curl: Windows filename sanitizer misses Unicode COM/LPT reserved device names
Hi all, I found a way for a server-selected Windows filename to bypass curl's reserved DOS device-name sanitizer. With curl -O -J, a Content-Disposition filename such as COM¹, COM², COM³, LPT¹, LPT², or LPT³ is left unchanged, even though Windows treats all six as reserved device names. Curl...
5.9AI score
SaveExploits0
20