diff options
| author | Danilo M. <danix@danix.xyz> | 2026-08-02 17:27:07 +0200 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-08-02 17:27:07 +0200 |
| commit | 35d3e4ff127b0213fa4d34f630c4a019e533a4df (patch) | |
| tree | 7cf50ed64ad5886ff909ab8ab2a26d99b2d90947 /tests/fixtures/hostile_filename.eml | |
| parent | b61ce428d81871fbbc6261f274f20785db9d1c38 (diff) | |
| download | qtmaildir-35d3e4ff127b0213fa4d34f630c4a019e533a4df.tar.gz qtmaildir-35d3e4ff127b0213fa4d34f630c4a019e533a4df.zip | |
feat: add MimeParser with GMime and safe attachment naming
Diffstat (limited to 'tests/fixtures/hostile_filename.eml')
| -rw-r--r-- | tests/fixtures/hostile_filename.eml | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/tests/fixtures/hostile_filename.eml b/tests/fixtures/hostile_filename.eml new file mode 100644 index 0000000..4dc79b6 --- /dev/null +++ b/tests/fixtures/hostile_filename.eml @@ -0,0 +1,17 @@ +From: Attacker <bad@example.org> +Subject: Hostile attachment name +Date: Sat, 01 Aug 2026 10:00:00 +0000 +Message-ID: <evil-1@example.org> +MIME-Version: 1.0 +Content-Type: multipart/mixed; boundary="EVIL" + +--EVIL +Content-Type: text/plain; charset=utf-8 + +body +--EVIL +Content-Type: text/plain; name="../../../../tmp/pwned.txt" +Content-Disposition: attachment; filename="../../../../tmp/pwned.txt" + +owned +--EVIL-- |