q/thirdculture-werc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

bin/contrib/rc-httpd{rc-httpd, handlers/error}: do some minimal sanitization on $SERVER_NAME before handing it off to select-handler. this prevents malformed Host: headers from retrieving arbitrary files from the file system. (thanks, Lightning)

Browse source
This commit is contained in:
Stanley Lieber 2021-11-21 18:49:58 -05:00
parent 4e454ff73b
commit 3a90e2da78
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
bin/contrib/rc-httpd/rc-httpd
View file

@ -86,6 +86,11 @@ if(~ $#SERVER_NAME 2){
SERVER_PORT=$SERVER_NAME(2) SERVER_PORT=$SERVER_NAME(2)
SERVER_NAME=$SERVER_NAME(1) SERVER_NAME=$SERVER_NAME(1)
} }
switch($SERVER_NAME){
case */* ..
error 400
exit
}
if(~ $REQUEST_METHOD (PUT POST)){ if(~ $REQUEST_METHOD (PUT POST)){
if(! ~ $"CONTENT_LENGTH '') if(! ~ $"CONTENT_LENGTH '')
trim_input | exec $rc_httpd_dir/select-handler trim_input | exec $rc_httpd_dir/select-handler