change the client side download rename code to reject ANY new / in the file

name. This means that if maps/foo.bsp is requested, maps/foo.bsp/nasty_server
will be rejected but maps/foo.bsp.gz will be accepted.

source/cl_parse.c

@@ -394,8 +394,7 @@ void CL_ParseDownload (void)
 	if (size == -2) {
 		char *newname = MSG_ReadString();
 		if (strncmp (newname, cls.downloadname, strlen(cls.downloadname))
-			|| strstr(newname, "/../")
-			|| strstr(newname, "/./")) {
+			|| strstr(newname+strlen(cls.downloadname), "/")) {
 			Con_Printf ("WARNING: server tried to give a strange new name: %s\n",
 						newname);
 			CL_RequestNextDownload ();