[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-commits
Subject:    KDE/kdelibs/kioslave/http
From:       Dawit Alemayehu <adawit () kde ! org>
Date:       2011-01-10 17:33:35
Message-ID: 20110110173335.0F026AC8B2 () svn ! kde ! org
[Download RAW message or body]

SVN commit 1213508 by adawit:

Don't allow control characters even in quoted file names.

 M  +2 -0      parsinghelpers.cpp  


--- trunk/KDE/kdelibs/kioslave/http/parsinghelpers.cpp #1213507:1213508
@@ -374,6 +374,8 @@
                 ++pos;
                 endquote = true;
                 break;
+            } else if (!str[pos].isPrint()) { // Don't allow CTL's RFC 2616 sec 2.2
+                break;
             }  else {
                 out += str[pos];
                 ++pos;
[prev in list] [next in list] [prev in thread] [next in thread]