nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-08-29 18:26:05 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Ensure incoming URLs are decoded before we process them.

Browse Source
This commit is contained in:
Andrew McMillan 2009-08-24 12:09:17 +12:00
parent 950a770450
commit 989cc98b52
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
inc/CalDAVRequest.php
View File

@ -186,7 +186,12 @@ class CalDAVRequest
* the minimum privileges returned from that analysis.
*/
$this->path = (isset($_SERVER['PATH_INFO']) ? $_SERVER['PATH_INFO'] : "");
if ( $this->path == null || $this->path == '' ) $this->path = '/';
if ( $this->path == null || $this->path == '' ) {
$this->path = '/';
}
else {
$this->path = rawurldecode($this->path);
}
// dbg_error_log( "caldav", "Sanitising path '%s'", $this->path );
$bad_chars_regex = '/[\\^\\[\\(\\\\]/';
if ( preg_match( $bad_chars_regex, $this->path ) ) {