mirror of
https://gitlab.winehq.org/wine/wine-gecko.git
synced 2024-09-13 09:24:08 -07:00
389580 don't allow escaped null bytes in URLs for external protocol handlers
r=bzbarsky sr=dveditz
This commit is contained in:
parent
a8f23b63a2
commit
16eb1776f7
@ -1215,6 +1215,9 @@ NS_IMETHODIMP nsExternalHelperAppService::LoadURI(nsIURI * aURL, nsIPrompt * aPr
|
||||
nsCAutoString spec;
|
||||
aURL->GetSpec(spec);
|
||||
|
||||
if (spec.Find("%00") != -1)
|
||||
return NS_ERROR_MALFORMED_URI;
|
||||
|
||||
spec.ReplaceSubstring("\"", "%22");
|
||||
spec.ReplaceSubstring("`", "%60");
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user