crt0mega
/
skipfish
1
0
Fork 0
Code Issues 1 Pull Requests Projects Releases Wiki Activity

1.20b - URL parser now accounts for its own \.\ injection pattern. bugfix

This commit is contained in:
Steve Pinkham 2010-03-25 00:29:30 -04:00
parent 00dcafb61c
commit 50c87f0348
3 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ChangeLog
View File

@ -1,4 +1,4 @@
Version 1.20b:
Version 1.21b:
--------------
- URL parser now accounts for its own \.\ injection pattern.

2
config.h
View File

@ -23,7 +23,7 @@
#ifndef _HAVE_CONFIG_H
#define _HAVE_CONFIG_H
#define VERSION "1.20b"
#define VERSION "1.21b"
#define USE_COLOR 1 /* Use terminal colors */

5
http_client.c
View File

@ -497,12 +497,13 @@ void tokenize_path(u8* str, struct http_request* req, u8 add_slash) {
probes. This is to avoid recursion if it actually worked in some
way. */
if (!strncmp((char*)cur, "\\.\\", 3)) {
if (!strncmp((char*)cur, "\\.\\", 3) && (cur[3] == '/' || !cur[3])) {
cur += 3;
continue;
}
if (!strncasecmp((char*)cur, "%5c.%5c", 7)) {
if (!strncasecmp((char*)cur, "%5c.%5c", 7) &&
(cur[7] == '/' || !cur[7])) {
cur += 7;
continue;
}