Post any defects you find in the released or beta versions of the ImageMagick software here. Include the ImageMagick version, OS, and any command-line required to reproduce the problem. Got a patch for a bug? Post it here.
The same command also works from the Cygwin bash shell.
(Personally, I wouldn't use "http:" in IM commands because comms is the slowest and least reliable part of the process, and IM isn't engineered to diagnose or recover from comms problems.)
Note sure what this has to do with the security issue.
I guessed that its something with the URL characters and got this command to work (note brackets are URL encoded):
I assume that IM passes %5B etc straight through to the comms s/w, without interpretation.
Square brackets [] have a special meaning within IM, eg x.tif[3], so IM processes them specially. The code for this may have changed between your version (6.9.4-9) and mine (6.9.5-3).
alexs-MacBook-Pro:~ alex$ curl 'http://images.destinationmaternity.com/dmc?set=ImageURL[2651696cu.jpg],Imagesize[thumb]&call=url[file:sizer]&sink' > test.jpg
curl: (3) [globbing] bad range in column 57
alexs-MacBook-Pro:~ alex$ curl -g 'http://images.destinationmaternity.com/dmc?set=ImageURL[2651696cu.jpg],Imagesize[thumb]&call=url[file:sizer]&sink' > test.jpg
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 9537 100 9537 0 0 45990 0 --:--:-- --:--:-- --:--:-- 45850
Is there any way to disable interpretation/globbing the file name/url with IM?
We are using the im4java library which calls IM on the command line and would prefer IM to download the files instead of rolling our own file management code and/or calling curl manually.
Also I just found out the IM is on github now. Is that a better place to post this issue?