Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Username

Subject

Message body

Font colour:

Font size:

[quote="dvt"]Version: WinSCP 5.21.7 on Windows 10.
-----
Following the instruction:
[url=https://winscp.net/eng/docs/ui_generateurl]Generate Session URL[/url]
[url=https://winscp.net/eng/docs/session_url#advanced]Advanced site settings[/url]
I have the URL (SFTP) and made a URL-shortcut for easy access to my server, everything works fine. Pretty Good!

Lately, I tried to use a custom shell and sftpserver settings, also make it a url-shortcut, but I found that the [m]x-shell[/m] and [m]x-sftpserver[/m] in the URL don't work. Example:
[code]sftp://user:pass;x-shell=sudo;x-sftpserver=sudo%2520%2Fusr%2Flib%2Fsftp-server@servername/[/code]
[b]Steps are like:[/b]
[list=1]
[*] create a new session, fill in the username and pass
[*] change Advance Settings, use custom shell and sftp-server argument.
[*] save session
[*] right click on saved session and generate a URL, copy it.
[*] open system file explorer, paste the URL in the address bar and press enter.
[*] successfully connected through WinSCP. Right click on the session tab, generate the URL again, the URL would be [m]sftp://user:pass@servername/[/m] without any shell or sftp-server argument in it. Yeah, not functioning in session either.
[/list][/quote]

Options

Disable BBCode in this post

Notify me when a reply is posted (registered users only)

Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

Filename

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

File Comment

Options

Private file (available to author and site moderators only)

Topic review

martin

Re: x-sftpserver and x-shell not working properliy in URLs

2023-02-23

The WinSCP URL handler does not by default allow parts of the URL that could cause code-injection.

See also Generate URL session – Use only Shell: default

dvt

x-sftpserver and x-shell not working properliy in URLs

2023-02-20 15:10

Version: WinSCP 5.21.7 on Windows 10.
-----
Following the instruction:
Generate Session URL
Advanced site settings
I have the URL (SFTP) and made a URL-shortcut for easy access to my server, everything works fine. Pretty Good!

Lately, I tried to use a custom shell and sftpserver settings, also make it a url-shortcut, but I found that the x-shell and x-sftpserver in the URL don't work. Example:

sftp://user:pass;x-shell=sudo;x-sftpserver=sudo%2520%2Fusr%2Flib%2Fsftp-server@servername/

Steps are like:

create a new session, fill in the username and pass
change Advance Settings, use custom shell and sftp-server argument.
save session
right click on saved session and generate a URL, copy it.
open system file explorer, paste the URL in the address bar and press enter.
successfully connected through WinSCP. Right click on the session tab, generate the URL again, the URL would be sftp://user:pass@servername/ without any shell or sftp-server argument in it. Yeah, not functioning in session either.

Post a reply

Topic review

Re: x-sftpserver and x-shell not working properliy in URLs

x-sftpserver and x-shell not working properliy in URLs

Documentation

Support

Associations

Follow Us