actions/itgmania212121
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Fix subdomain matching

Browse Source
This commit is contained in:
Martin Natano
2022-05-01 17:33:52 +02:00
parent f7d8408fc2
commit b039be360c
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/NetworkManager.cpp
+3 -1
View File
@@ -108,13 +108,15 @@ bool NetworkManager::IsUrlAllowed(const std::string& url)
for (const auto& allowedHost : allowedHosts) for (const auto& allowedHost : allowedHosts)
{ {
if (allowedHost.substr(0, 2) == "*.") // subdomain wildcards; ".domain" doesn't match "*.domain", but "a.domain" does
if (allowedHost.substr(0, 2) == "*." && host.length() >= allowedHost.length())
{ {
size_t pos = host.length() - allowedHost.length() + 1; size_t pos = host.length() - allowedHost.length() + 1;
if (host.substr(pos) == allowedHost.substr(1)) if (host.substr(pos) == allowedHost.substr(1))
return true; return true;
} }
// literal match
if (host == allowedHost) if (host == allowedHost)
return true; return true;
} }