prosody
e53894d26092
spec/scansion/http_upload.scs

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Comparison

spec/scansion/http_upload.scs @ 11313:e53894d26092

mod_http_file_share: Validate that filename does not contain '/'
author Kim Alvefur <zash@zash.se>
date Tue, 26 Jan 2021 14:52:37 +0100
parent 11309:b59aed75dc5e
child 11314:7c8b02c5a335
comparison
equal deleted inserted replaced
11312:aade4a6179a3 11313:e53894d26092
19 <header name='Authorization'></header> 19 <header name='Authorization'></header>
20 </put> 20 </put>
21 </slot> 21 </slot>
22 </iq> 22 </iq>
23 23
24 Romeo sends:
25 <iq to='upload.localhost' type='get' id='ac56d83f-a627-4732-8399-60492d1210b6' xml:lang='en'>
26 <request content-type='text/plain' filename='invalid/filename.dat' xmlns='urn:xmpp:http:upload:0' size='1000'/>
27 </iq>
28
29 Romeo receives:
30 <iq id='ac56d83f-a627-4732-8399-60492d1210b6' from='upload.localhost' type='error'>
31 <error type='modify'>
32 <bad-request xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'/>
33 <text xmlns='urn:ietf:params:xml:ns:xmpp-stanzas'>Invalid filename</text>
34 </error>
35 </iq>
36
24 Romeo disconnects 37 Romeo disconnects
25 38
26 # recording ended on 2021-01-27T22:10:46Z 39 # recording ended on 2021-01-27T22:10:46Z