Path prefix //./ in Cygwin
Jeremy Drake
cygwin@jdrake.com
Thu Jun 12 00:57:20 GMT 2025
On Thu, 12 Jun 2025, Sam Edge via Cygwin wrote:
> I would think that if you're building something against Cygwin, it's probably
> best to assume it's POSIX where only forward-slash is special and not try to
> second-guess.
This is unsafe, and actually where the rust PR started out. If you only
treat '/' as special, a program may be tricked into allowing path
traversal with file/directory names like '..\..' or 'C:\Windows' which
are not path traversing or absolute paths in POSIX.
More information about the Cygwin
mailing list