cirosantilli
diff --git a/‎valid_filenames/" renamed to ‎" b/‎valid_filenames/" renamed to ‎"
diff --git a/‎valid_filenames/# renamed to ‎# b/‎valid_filenames/# renamed to ‎#
diff --git a/‎valid_filenames/' renamed to ‎' b/‎valid_filenames/' renamed to ‎'
diff --git a/‎valid_filenames/-start-with-slash renamed to ‎-start-with-slash b/‎valid_filenames/-start-with-slash renamed to ‎-start-with-slash
diff --git a/‎valid_filenames/.* renamed to ‎.* b/‎valid_filenames/.* renamed to ‎.*
diff --git a/‎valid_filenames/... renamed to ‎... b/‎valid_filenames/... renamed to ‎...
diff --git a/‎3
-1 b/‎3
-1
diff --git a/‎valid_filenames/?a=b renamed to ‎<script>alert('xss'); b/‎valid_filenames/?a=b renamed to ‎<script>alert('xss');
diff --git a/‎?a=b&c=d b/‎?a=b&c=d
diff --git a/‎README.md
+30-4 b/‎README.md
+30-4
diff --git a/‎valid_filenames/back\slash renamed to ‎back\slash b/‎valid_filenames/back\slash renamed to ‎back\slash
diff --git a/‎brancha
-1 b/‎brancha
-1
diff --git a/‎valid_filenames/end-in-dot-git.git renamed to ‎end-in-dot-git.git b/‎valid_filenames/end-in-dot-git.git renamed to ‎end-in-dot-git.git
diff --git a/‎huge_table.md
-3 b/‎huge_table.md
-3
diff --git a/‎valid_filenames/utf8-中文 renamed to ‎utf8-中文 b/‎valid_filenames/utf8-中文 renamed to ‎utf8-中文
diff --git a/‎valid_filenames/README.md
-5 b/‎valid_filenames/README.md
-5
@@ -32,11 +32,37 @@ The most interesting files on this repository are:
 
 -   [issue-markdown.md](issue-markdown.md): test the markdown on issues
 
--   whitespace filename edge cases:
+-   [filename/](filename/): weird stuff and attacks based on the filenames
 
-    - [single whitespace filename](%20)
-    - [double whitespace directory name](%20%20/) and [its README](%20%20/README.md)
-    - [a b](a b)
+    The only filenames which are not valid are:
+
+    - contain forward slash `/`
+    - `.git`
+    - `.` and `..`, but not `...`
+
+    Everything else goes:
+
+    -   [?a=b&c=d](?a=b&c=d)
+
+    -   ["](")
+
+    -   ['](')
+
+    -   [#](#)
+
+    -   [-start-with-slash](-start-with-slash)
+
+    -   [<script>](<script>)
+
+    -   `<script src="data:text;utf8,alert('xss')">`
+
+    -   [back\slash](back\slash)
+
+    -   whitespace filename edge cases:
+
+        - [single whitespace filename](%20)
+        - [double whitespace directory name](%20%20/) and [its README](%20%20/README.md)
+        - [a b](a b)
 
 Interesting branches and tags: