diff options
| author | Danilo M. <danix@danix.xyz> | 2026-08-02 17:27:07 +0200 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-08-04 12:52:21 +0200 |
| commit | 5f22f80b6b5cef5e768086338ae4b22120f3e67c (patch) | |
| tree | e127827da5a248fd8e6c80397f896a1f6d302ac0 /tests/fixtures/hostile_filename.eml | |
| parent | 72b56d0beca6d640c724eabc73a3ee45cf04bfea (diff) | |
| download | qtmaildir-5f22f80b6b5cef5e768086338ae4b22120f3e67c.tar.gz qtmaildir-5f22f80b6b5cef5e768086338ae4b22120f3e67c.zip | |
feat: add MimeParser with GMime and safe attachment naming
Diffstat (limited to 'tests/fixtures/hostile_filename.eml')
| -rw-r--r-- | tests/fixtures/hostile_filename.eml | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/tests/fixtures/hostile_filename.eml b/tests/fixtures/hostile_filename.eml new file mode 100644 index 0000000..4dc79b6 --- /dev/null +++ b/tests/fixtures/hostile_filename.eml @@ -0,0 +1,17 @@ +From: Attacker <bad@example.org> +Subject: Hostile attachment name +Date: Sat, 01 Aug 2026 10:00:00 +0000 +Message-ID: <evil-1@example.org> +MIME-Version: 1.0 +Content-Type: multipart/mixed; boundary="EVIL" + +--EVIL +Content-Type: text/plain; charset=utf-8 + +body +--EVIL +Content-Type: text/plain; name="../../../../tmp/pwned.txt" +Content-Disposition: attachment; filename="../../../../tmp/pwned.txt" + +owned +--EVIL-- |