diff options
| author | Jason A. Donenfeld <Jason@zx2c4.com> | 2016-01-14 14:31:13 +0100 | 
|---|---|---|
| committer | Jason A. Donenfeld <Jason@zx2c4.com> | 2016-01-14 14:31:13 +0100 | 
| commit | 1c581a072651524f3b0d91f33e22a42c4166dd96 (patch) | |
| tree | 6f29692870f6c822e37f60b77de61f946d93b747 | |
| parent | ui-shared: prevent malicious filename from injecting headers (diff) | |
| download | cgit-1c581a072651524f3b0d91f33e22a42c4166dd96.tar.gz cgit-1c581a072651524f3b0d91f33e22a42c4166dd96.tar.bz2 cgit-1c581a072651524f3b0d91f33e22a42c4166dd96.zip | |
ui-blob: Do not accept mimetype from user
Diffstat (limited to '')
| -rw-r--r-- | cgit.c | 2 | ||||
| -rw-r--r-- | cgit.h | 1 | ||||
| -rw-r--r-- | ui-blob.c | 1 | 
3 files changed, 0 insertions, 4 deletions
| @@ -314,8 +314,6 @@ static void querystring_cb(const char *name, const char *value)  		ctx.qry.path = trim_end(value, '/');  	} else if (!strcmp(name, "name")) {  		ctx.qry.name = xstrdup(value); -	} else if (!strcmp(name, "mimetype")) { -		ctx.qry.mimetype = xstrdup(value);  	} else if (!strcmp(name, "s")) {  		ctx.qry.sort = xstrdup(value);  	} else if (!strcmp(name, "showmsg")) { @@ -173,7 +173,6 @@ struct cgit_query {  	char *sha2;  	char *path;  	char *name; -	char *mimetype;  	char *url;  	char *period;  	int   ofs; @@ -161,7 +161,6 @@ void cgit_print_blob(const char *hex, char *path, const char *head, int file_onl  	}  	buf[size] = '\0'; -	ctx.page.mimetype = ctx.qry.mimetype;  	if (!ctx.page.mimetype) {  		if (buffer_is_binary(buf, size))  			ctx.page.mimetype = "application/octet-stream"; | 
