Skip to content
Blame History Permalink
  • Birte Kristina Friesel's avatar
    imlib.c: Use wget --no-clobber · 23421a86
    Birte Kristina Friesel authored 
    This prevents a (highly unlikely) case of an attacker knowing feh's PID and
the user's URL rewriting user files by means of a TOCTTOU attack.

It is still possible to _create_ arbitrary files via dangling symlinks. That
will be fixed once I switch from wget to libcurl.
    23421a86
To find the state of this project's repository at the time of any of these versions, check out the tags.