Public/elog
1
0
Fork 0
mirror of https://gitea.psi.ch/ELOG/elog.git synced 2026-09-08 17:13:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't show full path if file not found for security reasons

Browse Source
This commit is contained in:
ritt 2021-01-08 13:46:49 +01:00
parent 0f271ef6f3
commit 395e101add
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/elogd.c
View File

@ -8480,16 +8480,16 @@ void send_file_direct(char *file_name) {
close(fh); close(fh);
} else { } else {
char encodedname[256]; char encodedname[256], str[256];
show_html_header(NULL, FALSE, "404 Not Found", TRUE, FALSE, NULL, FALSE, 0); show_html_header(NULL, FALSE, "404 Not Found", TRUE, FALSE, NULL, FALSE, 0);
rsprintf("<body><h1>Not Found</h1>\r\n"); rsprintf("<body><h1>404 Not Found</h1>\r\n");
rsprintf("The requested file <b>"); rsprintf("The requested file <b>");
strencode2(encodedname, file_name, sizeof(encodedname)); strencode2(encodedname, file_name, sizeof(encodedname));
if (strchr(file_name, DIR_SEPARATOR)) if (strrchr(encodedname, DIR_SEPARATOR))
rsprintf("%s", encodedname); rsprintf("%s", strrchr(encodedname, DIR_SEPARATOR)+1, sizeof(str));
else else
rsprintf("%s%c%s", dir, DIR_SEPARATOR, encodedname); rsprintf("%s", encodedname);
rsprintf("</b> was not found on this server<p>\r\n"); rsprintf("</b> was not found on this server<p>\r\n");
return_length = strlen_retbuf; return_length = strlen_retbuf;
keep_alive = FALSE; keep_alive = FALSE;
@ -29528,7 +29528,8 @@ SSL_CTX *init_ssl(void) {
SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 |
SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1); SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1);
if (SSL_CTX_set_cipher_list(ctx, "ALL:!NULL-MD5:!NULL-SHA:!NULL-RSA") <= 0) { if (SSL_CTX_set_cipher_list(ctx,
"ECDH+AESGCM:ECDH+AES256:ECDH+AES:DH+AESGCM:DH+AES256:DH+AES:!aNULL:!ADH:!DSS:!kDH:!kECDH") <= 0) {
eprintf("Error setting the cipher list.\n"); eprintf("Error setting the cipher list.\n");
return NULL; return NULL;
} }