Commit Graph

2006 Commits

Author SHA1 Message Date
Tatsuya Kinoshita
455224bb5b Merge pull request #93 from mackyle/master
correct <base ...> parsing and do not turn a form's GET into POST
2017-08-27 23:06:07 +09:00
Kyle J. McKay
89e60cc474 form.c: do not gratuitously turn GET into POST
When encountering a <form ...> tag that contains these values:

    method="get" enctype="multipart/form-data"

Do not transform the method into POST to accomodate enctype.

Instead behave in the compatible way that all other browsers
behave in this instance and ignore the enctype parameter
(treating it as the default application/x-www-form-urlencoded)
and perform a "GET" just as the method parameter requests.

This behavior produces far more compatible results than
gratuitously changing the "get" into a "post" which can
result in unexpected "405 Method Not Allowed" errors.

Signed-off-by: Kyle J. McKay <mackyle@gmail.com>
2017-08-23 13:14:23 -07:00
Kyle J. McKay
d398b40332 file.c: compute correct base URL when not absolute
When a server makes use of the PATH_INFO feature in a CGI,
the returned pages may often have a <base href="..." /> tag
specifying the URL of the CGI itself as the base.

However, to avoid hard-coding the scheme and host into such
a base href, the href value will often omit the scheme, host
and port.

Make sure that when parsing any such base href value that
any omitted components are taken from the current URL rather
than taken as being from a bare, absolute file:/// URL.

Signed-off-by: Kyle J. McKay <mackyle@gmail.com>
2017-08-23 11:48:38 -07:00
Tatsuya Kinoshita
1ac245bdcd Update ChangeLog 2017-01-02 21:43:38 +09:00
Tatsuya Kinoshita
f4d2636c22 Update NEWS 2017-01-02 21:42:25 +09:00
Tatsuya Kinoshita
b17f50f07f Update ChangeLog 2017-01-02 21:38:01 +09:00
Tatsuya Kinoshita
eb4a381380 Update ChangeLog 2016-12-24 21:32:19 +09:00
Tatsuya Kinoshita
00433f4ac2 Prevent overflow beyond the end of string in wtf_parse1()
Bug-Debian: https://github.com/tats/w3m/issues/68
2016-12-24 21:21:49 +09:00
Tatsuya Kinoshita
f51c0966a4 Revert "Prevent overflow beyond the end of string in wtf_parse1()"
This reverts commit 998b6f91d4.
Bug-Debian: https://github.com/tats/w3m/issues/86
cf. http://emacs-w3m.namazu.org/ml/msg12505.html
2016-12-24 14:20:35 +09:00
Tatsuya Kinoshita
eb4130a7cd Preserve one byte for end of string character in form_update_line()
Bug-Debian: https://github.com/tats/w3m/issues/68#issuecomment-266214643
2016-12-24 13:02:41 +09:00
Tatsuya Kinoshita
dc32152dc0 Prevent invalid form_update_line() call in formUpdateBuffer()
Bug-Debian: https://github.com/tats/w3m/issues/82
2016-12-24 12:58:44 +09:00
Tatsuya Kinoshita
d3048fe281 Update ChangeLog 2016-12-20 20:29:35 +09:00
Tatsuya Kinoshita
971b0c1cf9 Revert "Preserve one byte for end of string character in form_update_line()"
This reverts commit a4152aaaea.
2016-12-20 20:20:01 +09:00
Tatsuya Kinoshita
b3805049f2 Update ChangeLog 2016-12-18 01:29:19 +09:00
Tatsuya Kinoshita
f33b7b2df0 Update ChangeLog 2016-12-18 01:26:26 +09:00
Tatsuya Kinoshita
aa2077e06f Prevent heap-use-after-free read in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/81
2016-12-18 01:20:14 +09:00
Tatsuya Kinoshita
7a2675b4a5 Prevent infinite loop in feed_textarea()
Bug-Debian: https://github.com/tats/w3m/issues/85
2016-12-18 00:44:36 +09:00
Tatsuya Kinoshita
5d665be811 Revert "Prevent overflow beyond the end of string in form_update_line()"
This reverts commit 9ccaa1dd0d.
2016-12-18 00:20:15 +09:00
Tatsuya Kinoshita
eba7f423fc Revert "Prevent overflow beyond the end of string in form_update_line()"
This reverts commit e0efc127ff.
2016-12-18 00:20:06 +09:00
Tatsuya Kinoshita
849d1dd239 Update ChangeLog 2016-12-16 00:51:43 +09:00
Tatsuya Kinoshita
c3a3305e03 Prevent overflow beyond the end of string for wtf to wcs macros
Bug-Debian: https://github.com/tats/w3m/issues/77
2016-12-16 00:44:49 +09:00
Tatsuya Kinoshita
922d6f7901 Revert "Prevent overflow beyond the end of string for wtf to wcs macros"
This reverts commit b4d27ba5cc.
2016-12-16 00:44:49 +09:00
Tatsuya Kinoshita
6eea841d3a Prevent overflow beyond the end of string in caller of get_mclen()
Bug-Debian: https://github.com/tats/w3m/issues/59
Bug-Debian: https://github.com/tats/w3m/issues/73
Bug-Debian: https://github.com/tats/w3m/issues/74
Bug-Debian: https://github.com/tats/w3m/issues/76
Bug-Debian: https://github.com/tats/w3m/issues/79
Bug-Debian: https://github.com/tats/w3m/issues/80
Bug-Debian: https://github.com/tats/w3m/issues/83
Bug-Debian: https://github.com/tats/w3m/issues/84
2016-12-16 00:44:44 +09:00
Tatsuya Kinoshita
107810c145 Revert "Prevent overflow beyond the end of string in proc_mchar()"
This reverts commit 512ed467d1.
2016-12-15 22:55:23 +09:00
Tatsuya Kinoshita
2124693540 Revert "Prevent overflow beyond the end of string in visible_length()"
This reverts commit a932f78a6d.
2016-12-15 22:53:04 +09:00
Tatsuya Kinoshita
6622b6520a Revert "Prevent overflow beyond the end of string in skip_space()"
This reverts commit e757b43bcf.
2016-12-15 22:52:05 +09:00
Tatsuya Kinoshita
3cb0915076 Revert "Prevent overflow beyond the end of string in visible_length_plain()"
This reverts commit f763b8ebf5.
2016-12-15 22:45:48 +09:00
Tatsuya Kinoshita
3eab80f2a1 Revert "Prevent overflow beyond the end of string in textfieldrep()"
This reverts commit 77d8d8d657.
2016-12-15 22:43:33 +09:00
Tatsuya Kinoshita
2aa21dc328 Revert "Prevent overflow beyond the end of string in proc_mchar()"
This reverts commit e79d0ec2a0.
2016-12-15 22:42:12 +09:00
Tatsuya Kinoshita
d19707eac0 Update ChangeLog 2016-12-13 23:11:41 +09:00
Tatsuya Kinoshita
e79d0ec2a0 Prevent overflow beyond the end of string in proc_mchar()
Bug-Debian: https://github.com/tats/w3m/issues/80
cf. https://github.com/tats/w3m/issues/59
2016-12-13 23:04:18 +09:00
Tatsuya Kinoshita
77d8d8d657 Prevent overflow beyond the end of string in textfieldrep()
Bug-Debian: https://github.com/tats/w3m/issues/79
2016-12-13 22:24:54 +09:00
Tatsuya Kinoshita
a4152aaaea Preserve one byte for end of string character in form_update_line()
Bug-Debian: https://github.com/tats/w3m/issues/82
cf. https://github.com/tats/w3m/issues/68#issuecomment-266214643
2016-12-13 21:44:40 +09:00
Tatsuya Kinoshita
aaeb31500d Update ChangeLog 2016-12-10 23:00:15 +09:00
Tatsuya Kinoshita
7fbaf9444f Prevent overflow beyond the end of string in wtf_len()
cf. https://github.com/tats/w3m/issues/57
2016-12-10 22:54:14 +09:00
Tatsuya Kinoshita
1978455e2e Prevent negative array index for realColumn in calcPosition()
Bug-Debian: https://github.com/tats/w3m/issues/69
2016-12-10 22:30:36 +09:00
Tatsuya Kinoshita
998b6f91d4 Prevent overflow beyond the end of string in wtf_parse1()
Bug-Debian: https://github.com/tats/w3m/issues/68
2016-12-10 22:09:34 +09:00
Tatsuya Kinoshita
4381dffaa3 Prevent heap-buffer-overflow in Strnew_size()
Bug-Debian: https://github.com/tats/w3m/issues/72
2016-12-10 18:18:58 +09:00
Tatsuya Kinoshita
f763b8ebf5 Prevent overflow beyond the end of string in visible_length_plain()
Bug-Debian: https://github.com/tats/w3m/issues/76
2016-12-10 18:18:58 +09:00
Tatsuya Kinoshita
b4d27ba5cc Prevent overflow beyond the end of string for wtf to wcs macros
Bug-Debian: https://github.com/tats/w3m/issues/77
2016-12-10 18:18:47 +09:00
Tatsuya Kinoshita
e0efc127ff Prevent overflow beyond the end of string in form_update_line()
Bug-Debian: https://github.com/tats/w3m/issues/78
2016-12-10 16:38:44 +09:00
Tatsuya Kinoshita
52e9fc6b44 Update ChangeLog 2016-12-09 00:41:23 +09:00
Tatsuya Kinoshita
9ccaa1dd0d Prevent overflow beyond the end of string in form_update_line()
Bug-Debian: https://github.com/tats/w3m/issues/75
2016-12-09 00:41:19 +09:00
Tatsuya Kinoshita
e757b43bcf Prevent overflow beyond the end of string in skip_space()
Bug-Debian: https://github.com/tats/w3m/issues/74
2016-12-08 23:51:09 +09:00
Tatsuya Kinoshita
a932f78a6d Prevent overflow beyond the end of string in visible_length()
Bug-Debian: https://github.com/tats/w3m/issues/73
2016-12-08 23:46:30 +09:00
Tatsuya Kinoshita
a56a8ef132 Prevent overflow beyond the end of string in wtf_strwidth()
Bug-Debian: https://github.com/tats/w3m/issues/57
2016-12-08 01:00:42 +09:00
Tatsuya Kinoshita
295b1ef8f8 Revert "Prevent overflow beyond the end of string in wtf_strwidth()"
This reverts commit d345c0950d.
2016-12-08 00:54:42 +09:00
Tatsuya Kinoshita
37d9041510 Update ChangeLog 2016-12-07 22:13:42 +09:00
Tatsuya Kinoshita
26484fc138 Prevent heap-use-after-free in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/65
2016-12-07 22:09:06 +09:00
Tatsuya Kinoshita
ecf5771419 Prevent negative values for offset and pos in push_link()
Bug-Debian: https://github.com/tats/w3m/issues/64
2016-12-07 21:57:37 +09:00