uri: allow leading dots, but explicitly exclude "." and ".."

Dots at the beginning of an URI segment are ok, as long as the special names "." and ".." are not used.

uri: allow leading dots, but explicitly exclude "." and ".."
43cf4e97 · Max Kellermann · 795578ef · 43cf4e97
Commit 43cf4e97 authored Feb 27, 2010 by Max Kellermann
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

uri.c src/uri.c +4 -1

No files found.
--- a/src/uri.c
+++ b/src/uri.c
@@ -51,7 +51,10 @@ verify_uri_segment(const char *p)
 {
 	const char *q;
-	if (*p == 0 || *p == '/' || *p == '.')
+	unsigned dots = 0;
+	while (*p == '.')
+		++p;
+	if (dots <= 2 && (*p == 0 || *p == '/'))
 		return NULL;
 	q = strchr(p + 1, '/');