stv0g/libwebsockets
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

security disallow repeated GET

Browse source 
Signed-off-by: Andy Green <andy.green@linaro.org>
This commit is contained in:
Andy Green 2013-02-12 13:10:19 +08:00
parent 3ee9b31054
commit 94f94652ed
1 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
lib/parsers.c
View file

@ -512,6 +512,12 @@ int libwebsocket_parse(struct libwebsocket *wsi, unsigned char c)
lwsl_parser("known hdr '%s'\n", wsi->u.hdr.name_buffer);
if (n == WSI_TOKEN_GET_URI &&
wsi->u.hdr.ah->frag_index[WSI_TOKEN_GET_URI]) {
lwsl_warn("Duplicated GET\n");
return -1;
}
/*
* WSORIGIN is protocol equiv to ORIGIN,
* JWebSocket likes to send it, map to ORIGIN