roytam1/UXP
1
0
Fork 0
mirror of https://github.com/roytam1/UXP.git synced 2026-05-29 16:58:28 +00:00
Code Issues Projects Releases Wiki Activity

[AppCache] Add check for disallowed encoded path separators

Browse Source
This commit is contained in:
Moonchild
2020-07-09 13:01:36 +00:00
committed by Roy Tam
parent 6cf5f024c4
commit 6aaea9dde6
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
uriloader/prefetch/nsOfflineCacheUpdate.cpp
+8
View File
@@ -948,6 +948,14 @@ nsOfflineManifestItem::HandleManifestLine(const nsCString::const_iterator &aBegi
mStrictFileOriginPolicy))
break;
// Check fallback path for disallowed encoded path separators
nsAutoCString path;
fallbackURI->GetFilePath(path);
if (path.Find("%2f") != kNotFound || path.Find("%2F") != kNotFound) {
LogToConsole("Offline cache manifest bad fallback path", this);
break;
}
mFallbackURIs.AppendObject(fallbackURI);
AddNamespace(nsIApplicationCacheNamespace::NAMESPACE_FALLBACK,