adam/znc
1
0
Fork 0
mirror of https://github.com/znc/znc.git synced 2026-08-09 10:23:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Handle newlines in CHTTPSock::GetParam() and strip them out.

Browse Source 
There was a bug in webadmin which allowed any users to write arbitrary strings
to znc.conf by setting e.g. their quit message to:
  Some quit message
  Admin = true
  LoadModule = shell
  </User>
  ISpoofFile = /home/<user>/.ssh/authorited_keys
  ISpoofFormat = <some ssh key>
  <User a>
(The newlines must be sent as newlines to webadmin)

This commit fixes this by stripping all newlines from all the data fields
by default. Since some fields (e.g. CTCPReplies and Servers) do need newlines,
there is a new function CHTTPSock::GetRawParam() which doesn't do the stripping.

Thanks to cnu for finding and reporting this bug.
Thanks to kroimon for patch review.


git-svn-id: https://znc.svn.sourceforge.net/svnroot/znc/trunk@1395 726aef4b-f618-498e-8847-2d620e286838
This commit is contained in:
psychon
2009-02-24 16:00:11 +00:00
parent 6499609608
commit 21120e2146
3 changed files with 40 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
HTTPSock.cpp
+31 -8
View File
@@ -259,38 +259,61 @@ bool CHTTPSock::HasParam(const CString& sName) const {
return (m_msvsParams.find(sName) != m_msvsParams.end());
}
CString CHTTPSock::GetParam(const CString& sName) const {
CString CHTTPSock::GetRawParam(const CString& sName) const {
CString sRet;
VCString vsParams;
if (GetParamValues(sName, vsParams)) {
sRet = vsParams[0];
map<CString, VCString>::const_iterator it = m_msvsParams.find(sName);
if (it != m_msvsParams.end() && it->second.size() > 0) {
sRet = it->second[0];
}
return sRet;
}
unsigned int CHTTPSock::GetParamValues(const CString& sName, set<CString>& ssRet) const {
CString CHTTPSock::GetParam(const CString& sName, const CString& sFilter) const {
CString sRet = GetRawParam(sName);
for (size_t i = 0; i < sFilter.length(); i++) {
sRet.Replace(CString(sFilter.at(i)), "");
}
return sRet;
}
unsigned int CHTTPSock::GetParamValues(const CString& sName, set<CString>& ssRet, const CString& sFilter) const {
ssRet.clear();
map<CString, VCString>::const_iterator it = m_msvsParams.find(sName);
if (it != m_msvsParams.end()) {
for (unsigned int a = 0; a < it->second.size(); a++) {
ssRet.insert(it->second[a]);
CString sParam = it->second[a];
for (size_t i = 0; i < sFilter.length(); i++) {
sParam.Replace(CString(sFilter.at(i)), "");
}
ssRet.insert(sParam);
}
}
return ssRet.size();
}
unsigned int CHTTPSock::GetParamValues(const CString& sName, VCString& vsRet) const {
unsigned int CHTTPSock::GetParamValues(const CString& sName, VCString& vsRet, const CString& sFilter) const {
vsRet.clear();
map<CString, VCString>::const_iterator it = m_msvsParams.find(sName);
if (it != m_msvsParams.end()) {
vsRet = it->second;
for (unsigned int a = 0; a < it->second.size(); a++) {
CString sParam = it->second[a];
for (size_t i = 0; i < sFilter.length(); i++) {
sParam.Replace(CString(sFilter.at(i)), "");
}
vsRet.push_back(sParam);
}
}
return vsRet.size();