%5C in url

Hi,

I just find that Mozilla can ask urls like
http://www.lasercomp.ru/technologies/..%5%f3img/lk.gif and user can
see nothing....
Well this is windoz-way to write things like that, but...

So I have make fix for it
in Squid 2.5
url.c -> urlParse()
====================
#ifdef HARDCODE_DENY_PORTS
     /* These ports are filtered in the default squid.conf, but
      * maybe someone wants them hardcoded... */
     if (port == 7 || port == 9 || port == 19) {
        debug(23, 0) ("urlParse: Deny access to port %d\n", port);
        return NULL;
     }
#endif
+/* EK add for fucking M$-style (beep) like
http://www.lasercomp.ru/technologies/..%5Cimg/logo3.gif */
+ t = strstr(urlpath,"%5C");
+ if(t)
+ { int i;
+ l = strlen(t);
+ q = t + 3;
+ *t = '/';
+ t++;
+ for(i=3; i < l; i++)
+ { *t++ = *q++;
+ }
+ *t = 0;
+ }

     if (stringHasWhitespace(urlpath)) {
        debug(23, 2) ("urlParse: URI has whitespace: {%s}\n", url);
=================

Evgeny Kotsuba
Received on Sun Feb 15 2004 - 15:04:55 MST