diff options
| author | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2010-02-27 08:22:58 +0000 |
|---|---|---|
| committer | Tatsuhiro Tsujikawa <tatsuhiro.t@gmail.com> | 2010-02-27 08:22:58 +0000 |
| commit | dc2a51b54a5ef934109edd8416f82a0e050657b2 (patch) | |
| tree | ce8eb40d47c96432f47cd72cdc98198aaae43e80 /src/message.h | |
| parent | 513a6bd12dcbbb14e67a6a7b44fe77bfdef30318 (diff) | |
2010-02-27 Tatsuhiro Tsujikawa <t-tujikawa@users.sourceforge.net>
Discard torrent file if path data in it contains directory
traversal directives. Discard metalink:file element in Metalink3
format if its name attribute contains directory traversal
directives. Ignore name attribute of metalink:signature element
in Metalink3 format if it contains directory traversal directives.
* src/MetalinkParserStateV3Impl.cc
* src/bittorrent_helper.cc
* src/message.h
* test/BittorrentHelperTest.cc
* test/Makefile.am
* test/MetalinkProcessorTest.cc
* test/metalink3-dirtraversal.xml
* test/test.xml
Diffstat (limited to 'src/message.h')
| -rw-r--r-- | src/message.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/message.h b/src/message.h index 930e4139..c563c2b3 100644 --- a/src/message.h +++ b/src/message.h @@ -180,6 +180,7 @@ #define MSG_METADATA_SAVED _("Saved metadata as %s.") #define MSG_METADATA_NOT_SAVED _("Saving metadata as %s failed. Maybe file" \ " already exists.") +#define MSG_DIR_TRAVERSAL_DETECTED _("Detected directory traversal directive in %s") #define EX_TIME_OUT _("Timeout.") #define EX_INVALID_CHUNK_SIZE _("Invalid chunk size.") |