wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-08-15 08:53:07 +09:00
Code Issues Projects Releases Packages Wiki Activity

[AppCache] Add check for disallowed encoded path separators

Browse source
This commit is contained in:
Moonchild 2020-07-09 13:01:36 +00:00 • committed by Roy Tam
commit 6aaea9dde6
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
uriloader/prefetch/nsOfflineCacheUpdate.cpp
View file

@ -948,6 +948,14 @@ nsOfflineManifestItem::HandleManifestLine(const nsCString::const_iterator &aBegi
mStrictFileOriginPolicy))
break;
// Check fallback path for disallowed encoded path separators
nsAutoCString path;
fallbackURI->GetFilePath(path);
if (path.Find("%2f") != kNotFound || path.Find("%2F") != kNotFound) {
LogToConsole("Offline cache manifest bad fallback path", this);
break;
}
mFallbackURIs.AppendObject(fallbackURI);
AddNamespace(nsIApplicationCacheNamespace::NAMESPACE_FALLBACK,