From: Wilfried Göesgens <willi@citadel.org>
Date: Wed, 11 Feb 2009 19:50:02 +0000 (+0000)
Subject: * replace nonprintable chars in http headerlines by § so bad guys don't jam us.
X-Git-Tag: v7.86~1463
X-Git-Url: https://code.citadel.org/?a=commitdiff_plain;h=b0c080cafab9159ba090270cc67602d75d297092;p=citadel.git

* replace nonprintable chars in http headerlines by § so bad guys don't jam us.
---

diff --git a/webcit/context_loop.c b/webcit/context_loop.c
index c8461d2c8..ddfd3bc21 100644
--- a/webcit/context_loop.c
+++ b/webcit/context_loop.c
@@ -319,8 +319,8 @@ void context_loop(int *sock)
 			continue;
 		}
 
+		StrBufSanitizeAscii(Line, '§');
 		StrBufExtract_token(HeaderName, Line, 0, ':');
-		/*/// TODO: filter bad chars! */
 
 		pchs = ChrPtr(Line);
 		pch = pchs + StrLength(HeaderName) + 1;