wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-10-24 08:07:30 +09:00
Code Issues Projects Releases Packages Wiki Activity

Add extra check for path traversal sanity.

Browse source
This commit is contained in:
wolfbeast 2018-03-17 13:22:41 +01:00 • committed by Roy Tam
commit 01de5bc76a
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
chrome/nsChromeRegistry.cpp
View file

@ -238,6 +238,12 @@ nsChromeRegistry::Canonify(nsIURL* aChromeURL)
// path is already unescaped once, but uris can get unescaped twice // path is already unescaped once, but uris can get unescaped twice
const char* pos = path.BeginReading(); const char* pos = path.BeginReading();
const char* end = path.EndReading(); const char* end = path.EndReading();
// Must start with [a-zA-Z0-9].
if (!('a' <= *pos && *pos <= 'z') &&
!('A' <= *pos && *pos <= 'Z') &&
!('0' <= *pos && *pos <= '9')) {
return NS_ERROR_DOM_BAD_URI;
}
while (pos < end) { while (pos < end) {
switch (*pos) { switch (*pos) {
case ':': case ':':