lighttpd
/
lighttpd1.4
2
0
Fork 0
Code Issues Releases Wiki Activity

[mod_webdav] compare COPY, MOVE Destination scheme 

compare COPY, MOVE Destination scheme with request URI scheme
This commit is contained in:
Glenn Strauss 2019-01-22 01:04:23 -05:00
parent b31e7840d5
commit 05d20bcac2
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/mod_webdav.c
View File

@ -1958,12 +1958,14 @@ static handler_t mod_webdav_copymove(server *srv, connection *con, plugin_data *
* */
start = destination->ptr;
sep = start + buffer_string_length(con->uri.scheme);
if (NULL == (sep = strstr(start, "://"))) {
if (0 != strncmp(start, con->uri.scheme->ptr, sep - start)
|| sep[0] != ':' || sep[1] != '/' || sep[2] != '/') {
con->http_status = 400;
return HANDLER_FINISHED;
}
buffer_copy_string_len(p->uri.scheme, start, sep - start);
buffer_copy_buffer(p->uri.scheme, con->uri.scheme); /*(unused?)*/
start = sep + 3;