jyapayne/Simple-Web-Server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Changed ..-replacement in examples

Browse source
This commit is contained in:
eidheim 2014-08-29 19:02:34 +02:00
commit 3367b86f07
2 changed files with 4 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

8
http_examples.cpp
View file

@ -83,14 +83,10 @@ int main() {
string path=request->path_match[1]; string path=request->path_match[1];
//Remove all but the last '.' (so we can't leave the web-directory) //Replace all ".." with "." (so we can't leave the web-directory)
size_t last_pos=path.rfind(".");
size_t current_pos=0;
size_t pos; size_t pos;
while((pos=path.find('.', current_pos))!=string::npos && pos!=last_pos) { while((pos=path.find(".."))!=string::npos) {
current_pos=pos;
path.erase(pos, 1); path.erase(pos, 1);
last_pos--;
} }
filename+=path; filename+=path;

8
https_examples.cpp
View file

@ -83,14 +83,10 @@ int main() {
string path=request->path_match[1]; string path=request->path_match[1];
//Remove all but the last '.' (so we can't leave the web-directory) //Replace all ".." with "." (so we can't leave the web-directory)
size_t last_pos=path.rfind(".");
size_t current_pos=0;
size_t pos; size_t pos;
while((pos=path.find('.', current_pos))!=string::npos && pos!=last_pos) { while((pos=path.find(".."))!=string::npos) {
current_pos=pos;
path.erase(pos, 1); path.erase(pos, 1);
last_pos--;
} }
filename+=path; filename+=path;