From 21d1a446f5c67adceab5a378a9703be131c0b23b Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Tue, 26 Jan 2021 10:28:48 +0100
Subject: [PATCH] cgi_send_user_manual(): Also reject requests if the
user-manual
... directive specifies a https:// URL.
Previously Privoxy would try and fail to open a local file.
---
cgisimple.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/cgisimple.c b/cgisimple.c
index 5099a579..600eea58 100644
--- a/cgisimple.c
+++ b/cgisimple.c
@@ -980,7 +980,8 @@ jb_err cgi_send_user_manual(struct client_state *csp,
assert(rsp);
assert(parameters);
- if (0 == strncmpic(csp->config->usermanual, "http://", 7))
+ if (0 == strncmpic(csp->config->usermanual, "http://", 7) ||
+ 0 == strncmpic(csp->config->usermanual, "https://", 8))
{
log_error(LOG_LEVEL_CGI, "Request for local user-manual "
"received while user-manual delivery is disabled.");
--
2.49.0