gitproxy/RTLPlayground
1
0
Fork 0
mirror of https://github.com/logicog/RTLPlayground.git synced 2026-08-30 14:52:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

httpd: Added extra content_type check for login.

Browse Source 
Ensure login content_type is "application/x-www-form-urlencoded".
This commit is contained in:
René van Dorst
2026-05-17 17:17:15 +02:00
parent aa5368cf34
commit 623247da4f
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
httpd/httpd.c
+7
View File
@@ -442,6 +442,13 @@ void handle_post(void)
cmd_available = 1; cmd_available = 1;
} else if (is_word(request_path, "login")) { } else if (is_word(request_path, "login")) {
dbg_string("POST login\n"); dbg_string("POST login\n");
if (!content_type || !is_word(content_type, "application/x-www-form-urlencoded")) {
dbg_string("Bad request!\n");
send_bad_request();
return;
}
p += 8; // Read also over "pwd=" p += 8; // Read also over "pwd="
if (is_url_word_x(p, passwd)) { if (is_url_word_x(p, passwd)) {
dbg_string("Password accepted!\n"); dbg_string("Password accepted!\n");