X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=filters.c;h=3c14ac8fc948db06618f49c6bcd8feebdf778f86;hb=36acaceaae9b0e88caf892ffd2751e53108ebff5;hp=adcea9ac9f91ab922a4586fbb58e3df0b80b3fe3;hpb=d4e909d93d0ebfe18a51890afdabc3adc9376bd3;p=privoxy.git diff --git a/filters.c b/filters.c index adcea9ac..3c14ac8f 100644 --- a/filters.c +++ b/filters.c @@ -1,4 +1,4 @@ -const char filters_rcs[] = "$Id: filters.c,v 1.153 2011/10/30 16:20:12 fabiankeil Exp $"; +const char filters_rcs[] = "$Id: filters.c,v 1.157 2011/11/06 11:48:23 fabiankeil Exp $"; /********************************************************************* * * File : $Source: /cvsroot/ijbswa/current/filters.c,v $ @@ -78,11 +78,6 @@ const char filters_rcs[] = "$Id: filters.c,v 1.153 2011/10/30 16:20:12 fabiankei #include "urlmatch.h" #include "loaders.h" -#ifdef HAVE_STRTOK -/* Only used for locks */ -#include "jcc.h" -#endif /* def HAVE_STRTOK */ - #ifdef _WIN32 #include "win32.h" #endif @@ -1110,67 +1105,71 @@ char *get_last_url(char *subject, const char *redirect_mode) return NULL; } - if (0 == strcmpic(redirect_mode, "check-decoded-url")) + if (0 == strcmpic(redirect_mode, "check-decoded-url") && strchr(subject, '%')) { log_error(LOG_LEVEL_REDIRECTS, "Checking \"%s\" for encoded redirects.", subject); -#if defined(MUTEX_LOCKS_AVAILABLE) && defined(HAVE_STRTOK) /* * Check each parameter in the URL separately. * Sectionize the URL at "?" and "&", - * then URL-decode each component, + * go backwards through the segments, URL-decode them * and look for a URL in the decoded result. - * Keep the last one we spot. + * Stop the search after the first match. + */ + char *url_segment = NULL; + /* + * XXX: This estimate is guaranteed to be high enough as we + * let ssplit() ignore empty fields, but also a bit wasteful. */ - char *found = NULL; + size_t max_segments = strlen(subject) / 2; + char **url_segments = malloc(max_segments * sizeof(char *)); + int segments; - privoxy_mutex_lock(&strtok_mutex); - char *token = strtok(subject, "?&"); - while (token) + if (NULL == url_segments) { - char *dtoken = url_decode(token); + log_error(LOG_LEVEL_ERROR, "Out of memory while decoding URL: %s", new_url); + freez(subject); + return NULL; + } + + segments = ssplit(subject, "?&", url_segments, max_segments, 1, 1); + + while (segments-- > 0) + { + char *dtoken = url_decode(url_segments[segments]); if (NULL == dtoken) { - log_error(LOG_LEVEL_ERROR, "Unable to decode \"%s\".", token); + log_error(LOG_LEVEL_ERROR, "Unable to decode \"%s\".", url_segments[segments]); continue; } - char *http_url = strstr(dtoken, "http://"); - char *https_url = strstr(dtoken, "https://"); - char *last_url = (http_url && https_url - ? (http_url < https_url ? http_url : https_url) - : (http_url ? http_url : https_url)); - if (last_url) + url_segment = strstr(dtoken, "http://"); + if (NULL == url_segment) { - freez(found); - found = strdup(last_url); - if (found == NULL) + url_segment = strstr(dtoken, "https://"); + } + if (NULL != url_segment) + { + url_segment = strdup(url_segment); + freez(dtoken); + if (url_segment == NULL) { log_error(LOG_LEVEL_ERROR, "Out of memory while searching for redirects."); - privoxy_mutex_unlock(&strtok_mutex); return NULL; } + break; } freez(dtoken); - token = strtok(NULL, "?&"); } - privoxy_mutex_unlock(&strtok_mutex); freez(subject); + freez(url_segments); - return found; -#else - new_url = url_decode(subject); - if (new_url != NULL) + if (url_segment == NULL) { - freez(subject); - subject = new_url; - } - else - { - log_error(LOG_LEVEL_ERROR, "Unable to decode \"%s\".", subject); + return NULL; } -#endif /* defined(MUTEX_LOCKS_AVAILABLE) && defined(HAVE_STRTOK) */ + subject = url_segment; } /* Else, just look for a URL inside this one, without decoding anything. */ @@ -1308,6 +1307,20 @@ struct http_response *redirect_url(struct client_state *csp) /* Did any redirect action trigger? */ if (new_url) { + if (url_requires_percent_encoding(new_url)) + { + char *encoded_url; + log_error(LOG_LEVEL_REDIRECTS, "Percent-encoding redirect URL: %N", + strlen(new_url), new_url); + encoded_url = percent_encode_url(new_url); + freez(new_url); + if (encoded_url == NULL) + { + return cgi_error_memory(); + } + new_url = encoded_url; + } + if (0 == strcmpic(new_url, csp->http->url)) { log_error(LOG_LEVEL_ERROR, @@ -1325,8 +1338,8 @@ struct http_response *redirect_url(struct client_state *csp) return cgi_error_memory(); } - if ( enlist_unique_header(rsp->headers, "Location", new_url) - || (NULL == (rsp->status = strdup("302 Local Redirect from Privoxy"))) ) + if (enlist_unique_header(rsp->headers, "Location", new_url) + || (NULL == (rsp->status = strdup("302 Local Redirect from Privoxy")))) { freez(new_url); free_http_response(rsp);