Subject: Re: port-i386/4580: sysinst i386 - no shell metachars in FTP pas
To: Luke Mewburn <lm@cs.rmit.edu.au>
From: Tim Rightnour <root@garbled.futureone.com>
List: netbsd-bugs
Date: 11/26/1997 19:13:47
On 26-Nov-97 Luke Mewburn spoke unto us all:
# I'm not sure if it's `legal' to escape characters in an ftp url (i've
# considered this problem before; part of the issue is that the url
# can be of the form:
#         ftp://[user:passwd]@host[:port]/...
# (i.e, optional bits at either end of the string)
# 

When I used to do cgi programming, I would "escape" characters in a URL by
writing them in hex..  I believe the format is %20 ie.. % then hex digit..
sometimes you will see links made by people on win95 boxes where they put
spaces in the filenames (grrr).. and netscape will pick it up as something like
bob%20file.html

I assume we could just pass the password as a hex string..  dunno how the other
side would interpret it though... if its compliant it should Do the Right
Thing..  but html and compliant are two bad words to use in a sentance.

---
Tim Rightnour    -  root@garbled.futureone.com
http://www.zynetwc.com/~garbled/garbled.html