mirrors/netsurf
1
0
Fork 0
mirror of https://github.com/netsurf-browser/netsurf synced 2024-11-22 06:21:45 +03:00
Code Issues Packages Projects Releases Wiki Activity

Forbid redirects to file:/// URLs

Browse Source 
svn path=/trunk/netsurf/; revision=10352
This commit is contained in:
John Mark Bell 2010-04-11 14:06:02 +00:00
parent 40bac34ffd
commit 863d5c77c3
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
content/llcache.c
View File

@ -1590,6 +1590,7 @@ nserror llcache_fetch_redirect(llcache_object *object, const char *target,
llcache_object_user *user, *next;
const llcache_post_data *post = object->fetch.post;
char *url, *absurl;
char *scheme;
url_func_result result;
/* Extract HTTP response code from the fetch object */
long http_code = fetch_http_code(object->fetch.fetch);
@ -1640,7 +1641,20 @@ nserror llcache_fetch_redirect(llcache_object *object, const char *target,
return NSERROR_NOMEM;
}
/** \todo Ensure that redirects to file:/// don't happen? */
/* Ensure that redirects to file:/// don't happen */
result = url_scheme(url, &scheme);
if (result != URL_FUNC_OK) {
free(url);
return NSERROR_NOMEM;
}
if (strcasecmp(scheme, "file") == 0) {
free(scheme);
free(url);
return NSERROR_OK;
}
free(scheme);
/* Bail out if we've no way of handling this URL */
if (fetch_can_fetch(url) == false) {