Simon Tatham 2675f9578d File transfer tools: sanitise remote filenames and stderr. ...

This commit adds sanitisation to PSCP and PSFTP in the same style as
I've just put it into Plink. This time, standard error is sanitised
without reference to whether it's redirected (at least unless you give
an override option), on the basis that where Plink is _sometimes_ an
SSH transport for some other protocol, PSCP and PSFTP _always_ are.

But also, the sanitiser is run over any remote filename sent by the
server, substituting ? for any control characters it finds. That
removes another avenue for the server to deliberately confuse the
display.

This commit fixes our bug 'pscp-unsanitised-server-output', aka the
two notional 'vulnerabilities' CVE-2019-6109 and CVE-2019-6110.
(Although we regard those in isolation as only bugs, not serious
vulnerabilities, because their main threat was in hiding the evidence
of a server having exploited other more serious vulns that we never
had.)

2019-02-20 07:27:22 +00:00

..

blurb.but

Switch to using Halibut's new direct .CHM generation.

2017-05-13 18:51:10 +01:00

chm.css

Minor style tweaks for the CHM.

2006-12-19 10:28:44 +00:00

config.but

Add option whether to include header when logging.

2018-09-26 12:13:01 +01:00

errors.but

Remove some ancient cruft from the FAQ.

2017-05-23 23:13:17 +01:00

faq.but

Add a FAQ about servers that don't like IUTF8.

2017-07-12 10:19:23 +01:00

feedback.but

Switch chiark URLs to https.

2017-05-07 16:29:01 +01:00

gs.but

Cross-reference all the host key docs.

2016-03-26 17:38:49 +00:00

index.but

Tweak docs for GSSAPI key exchange.

2018-05-20 13:57:35 +01:00

intro.but

Remove references to "Win32" and "32-bit Windows".

2017-02-15 23:58:25 +00:00

Makefile

Switch to using Halibut's new direct .CHM generation.

2017-05-13 18:51:10 +01:00

man-pag.but

Support sh/csh syntax switching for Unix Pageant.

2016-03-25 16:43:59 +00:00

man-pg.but

Document cmdgen ability to read public-only keys.

2017-02-11 21:12:16 +00:00

man-pl.but

Add -share -noshare command line option to plink to share SSL connections.

2017-07-08 09:28:20 +01:00

man-pscp.but

Switch chiark URLs to https.

2017-05-07 16:29:01 +01:00

man-psft.but

Switch chiark URLs to https.

2017-05-07 16:29:01 +01:00

man-ptel.but

Switch chiark URLs to https.

2017-05-07 16:29:01 +01:00

man-pter.but

Examples in man pages for '-fn' option.

2016-03-27 11:33:21 +01:00

man-putt.but

Switch chiark URLs to https.

2017-05-07 16:29:01 +01:00

mancfg.but

Now that Halibut is capable of generating man pages better than I

2004-03-24 19:36:04 +00:00

manpages.but

Now that Halibut is capable of generating man pages better than I

2004-03-24 19:36:04 +00:00

pageant.but

Emphasise that agent forwarding exposes all keys.

2016-03-25 13:15:57 +00:00

pgpkeys.but

GPG key rollover.

2018-08-25 14:38:47 +01:00

plink.but

Plink: default to sanitising non-tty console output.

2019-02-20 07:27:22 +00:00

pscp.but

File transfer tools: sanitise remote filenames and stderr.

2019-02-20 07:27:22 +00:00

psftp.but

File transfer tools: sanitise remote filenames and stderr.

2019-02-20 07:27:22 +00:00

pubkey.but

Update docs and FAQ for current DSA policy.

2016-03-27 20:10:56 +01:00

site.but

Hmm, that relative link wasn't too good. Try a more helpful one.

2003-10-30 10:41:59 +00:00

sshnames.but

Cross-reference the description of winadj@putty.projects.tartarus.org

2014-10-21 11:33:33 +00:00

udp.but

Mention 'no VLAs' in the C-standards UDP section.

2019-01-02 22:14:15 +00:00

using.but

Document Ctrl-Shift-PgUp/PgDn.

2018-02-04 14:19:31 +00:00

vids.but

Rework versioning system to not depend on Subversion.

2014-09-24 10:33:13 +00:00