Fix slight bug about trustedDomains regex: domains might be tampered (#467)
This commit is contained in:
parent
ec22ab2592
commit
65252af36b
|
@ -458,7 +458,7 @@ sub new {
|
|||
$self->{trustedDomains} = "*"
|
||||
if ( $self->{trustedDomains} =~ /(^|\s)\*(\s|$)/ );
|
||||
if ( $self->{trustedDomains} and $self->{trustedDomains} ne "*" ) {
|
||||
$self->{trustedDomains} =~ s#(^|\s+)\.#[^/]+.#g;
|
||||
$self->{trustedDomains} =~ s#((^|\s+))\.#${1}[^/]+.#g;
|
||||
$self->{trustedDomains} =
|
||||
'(' . join( '|', split( /\s+/, $self->{trustedDomains} ) ) . ')';
|
||||
$self->{trustedDomains} =~ s/\./\\./g;
|
||||
|
|
Loading…
Reference in New Issue
Block a user