From d6d6b1729f0606d0ca348220eae543c2773fe3e5 Mon Sep 17 00:00:00 2001 From: Eli Zaretskii Date: Thu, 7 Nov 2024 21:51:56 +0200 Subject: [PATCH] ; * lisp/net/eww.el (eww-submit): Fix last change (bug#65973). (cherry picked from commit 4b4ca233675b7a820feca5893e5279327ab76795) --- lisp/net/eww.el | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lisp/net/eww.el b/lisp/net/eww.el index 43411cc640f..6c9851f6f1c 100644 --- a/lisp/net/eww.el +++ b/lisp/net/eww.el @@ -2068,8 +2068,9 @@ Interactively, EVENT is the value of `last-nonmenu-event'." (cons "name" name) ;; RFC 2183 declares that recipients should ;; only respect the basename of the filename - ;; parameter, so we only send that portion in - ;; our request. + ;; parameter, and the leading directories + ;; might divulge private information, so we + ;; only send the basename in our request. (cons "filename" (file-name-nondirectory file))) values))) ((equal (plist-get input :type) "submit") -- 2.39.5