SVN commit 1213508 by adawit: Don't allow control characters even in quoted file names. M +2 -0 parsinghelpers.cpp --- trunk/KDE/kdelibs/kioslave/http/parsinghelpers.cpp #1213507:1213508 @@ -374,6 +374,8 @@ ++pos; endquote = true; break; + } else if (!str[pos].isPrint()) { // Don't allow CTL's RFC 2616 sec 2.2 + break; } else { out += str[pos]; ++pos;