diff options
author | Christian Grothoff <christian@grothoff.org> | 2018-03-01 13:29:58 +0100 |
---|---|---|
committer | Christian Grothoff <christian@grothoff.org> | 2018-03-01 13:29:58 +0100 |
commit | 5717a9ec22d72d4d4202dfd3e1071ded9182e51e (patch) | |
tree | b402e7e8c96ce7da14b7277aef48b6b1f8630bfd /src/lib/connection_call_handlers.c | |
parent | 785ae52b3e397baf21400512ef2b4641b4170049 (diff) | |
download | libmicrohttpd-5717a9ec22d72d4d4202dfd3e1071ded9182e51e.tar.gz libmicrohttpd-5717a9ec22d72d4d4202dfd3e1071ded9182e51e.zip |
expand strictness to cover spaces in URL
Diffstat (limited to 'src/lib/connection_call_handlers.c')
-rw-r--r-- | src/lib/connection_call_handlers.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/lib/connection_call_handlers.c b/src/lib/connection_call_handlers.c index 17f32dae..cb82197c 100644 --- a/src/lib/connection_call_handlers.c +++ b/src/lib/connection_call_handlers.c | |||
@@ -1803,6 +1803,14 @@ parse_initial_message_line (struct MHD_Request *request, | |||
1803 | line_len - (uri - line)); | 1803 | line_len - (uri - line)); |
1804 | } | 1804 | } |
1805 | } | 1805 | } |
1806 | if ( (1 <= daemon->strict_for_client) && | ||
1807 | (NULL != memchr (line, | ||
1808 | ' ', | ||
1809 | http_version - line)) ) | ||
1810 | { | ||
1811 | /* space exists in URI and we are supposed to be strict, reject */ | ||
1812 | return MHD_NO; | ||
1813 | } | ||
1806 | if (NULL != daemon->early_uri_logger_cb) | 1814 | if (NULL != daemon->early_uri_logger_cb) |
1807 | { | 1815 | { |
1808 | request->client_context | 1816 | request->client_context |