From 21d1a446f5c67adceab5a378a9703be131c0b23b Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Tue, 26 Jan 2021 10:28:48 +0100 Subject: [PATCH] cgi_send_user_manual(): Also reject requests if the user-manual ... directive specifies a https:// URL. Previously Privoxy would try and fail to open a local file. --- cgisimple.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/cgisimple.c b/cgisimple.c index 5099a579..600eea58 100644 --- a/cgisimple.c +++ b/cgisimple.c @@ -980,7 +980,8 @@ jb_err cgi_send_user_manual(struct client_state *csp, assert(rsp); assert(parameters); - if (0 == strncmpic(csp->config->usermanual, "http://", 7)) + if (0 == strncmpic(csp->config->usermanual, "http://", 7) || + 0 == strncmpic(csp->config->usermanual, "https://", 8)) { log_error(LOG_LEVEL_CGI, "Request for local user-manual " "received while user-manual delivery is disabled."); -- 2.39.2