oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fixed possible DOS attack. Bug: 716700

Browse source
This commit is contained in:
Len Kranendonk 2003-04-09 10:59:26 +00:00
parent 87a06e2331
commit 1fd0544fd1
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
lib/WebGUI/Wobject/HttpProxy/Parse.pm
View file

@ -54,6 +54,7 @@ sub new {
$self->{Filtered} ="";
$self->{FormAction} = "";
$self->{FormActionIsDefined} = 0;
$self->{recurseCheck} = 0;
$self;
}
@ -62,6 +63,7 @@ sub filter {
my $self=shift;
$self->parse($self->{Content}); # Make paths absolute and let them return to us
$self->eof;
return "<p>Error: Can't proxy a HttpProxy object inside a HttpProxy object.</p>" if ($self->{recurseCheck});
return $self->{Filtered};
}
@ -99,6 +101,7 @@ sub start {
for (keys %$attr) {
$self->output(" $_=\"");
my $val = $attr->{$_};
$self->{recurseCheck} = 1 if($val =~ /proxiedUrl=/i); # We're proxying ourself.
if ((lc($tag) eq "input" || lc($tag) eq "textarea" || lc($tag) eq "select")
&& (lc($_) eq "name" || lc($_) eq "submit")) { # Rewrite input type names
$val = 'HttpProxy_' . $val;