Description
I have managed to create files attachments with filenames starting './foo/...'. See
http://static.23.nu/md/Pictures/ZZ565827C3.png
If I want to access them in Futon it results in the URL http://example.com:5984/huimages/222EPXUPYLMKM2JPBKBBFPH6U7N5UCR601/./Bilder_Photos/5-0-Multisport/5-06-Tischtennis/76253.jpg
this is automatically changed by my browser (Safari) to
http://example.com:5984/huimages/222EPXUPYLMKM2JPBKBBFPH6U7N5UCR601/Bilder_Photos/5-0-Multisport/5-06-Tischtennis/76253.jpg
resulting in
{"error":"not_found","reason":"Document is missing attachment"}I can access the file, if I change one of the slashes to %2f:
http://example.com:5984/huimages/222EPXUPYLMKM2JPBKBBFPH6U7N5UCR601/.%2fBilder_Photos/5-0-Multisport/5-06-Tischtennis/76253.jpg