Author: toad
Date: 2006-05-17 19:42:55 +0000 (Wed, 17 May 2006)
New Revision: 8750

Modified:
   trunk/freenet/src/freenet/clients/http/filter/GenericReadFilterCallback.java
   trunk/freenet/src/freenet/node/Version.java
Log:
719: Block ../ urls. Will be restored in the near future with proper filtering.

Modified: 
trunk/freenet/src/freenet/clients/http/filter/GenericReadFilterCallback.java
===================================================================
--- 
trunk/freenet/src/freenet/clients/http/filter/GenericReadFilterCallback.java    
    2006-05-17 19:39:08 UTC (rev 8749)
+++ 
trunk/freenet/src/freenet/clients/http/filter/GenericReadFilterCallback.java    
    2006-05-17 19:42:55 UTC (rev 8750)
@@ -64,6 +64,9 @@
                        // Kill it.
                        Logger.normal(this, "Unrecognized URI, dropped: "+uri);
                        return null;
+               } else if(path.startsWith("../")) {
+                       // Kill it, for now. FIXME we need to deal with 
relative URIs properly!
+                       return null;
                } else {
                        // Relative URI
                        // FIXME resolve it

Modified: trunk/freenet/src/freenet/node/Version.java
===================================================================
--- trunk/freenet/src/freenet/node/Version.java 2006-05-17 19:39:08 UTC (rev 
8749)
+++ trunk/freenet/src/freenet/node/Version.java 2006-05-17 19:42:55 UTC (rev 
8750)
@@ -18,7 +18,7 @@
        public static final String protocolVersion = "1.0";

        /** The build number of the current revision */
-       private static final int buildNumber = 718;
+       private static final int buildNumber = 719;

        /** Oldest build of Fred we will talk to */
        private static final int lastGoodBuild = 698;


Reply via email to