cvsweb/cvsweb.cgi - diff

Return to cvsweb.cgi CVS log

Up to [cvsweb.bsd.lv] / cvsweb

Diff for /cvsweb/cvsweb.cgi between version 4.8 and 4.12

version 4.8, 2019/11/09 09:41:07

version 4.12, 2019/11/10 14:55:42

Line 358 if (defined($ENV{QUERY_STRING})) {

$p =~ y/+/ /;

my ($key, $val) = split(/=/, $p, 2);

next unless defined($key);

$val = 1 unless defined($val);

$key = uri_unescape($key);

($key = uri_unescape($key)) =~ /[[:graph:]]/ or next;

$key =~ /([^a-z_12-])/ and fatal('404 Not Found',

($val = uri_unescape($val)) =~ /[[:graph:]]/ or next;

'Invalid character "%s" in query parameter "%s"', $1, $key);

if (defined $val) {

$val = uri_unescape($val);

$val =~ /([^a-zA-Z_01-9.\/-])/ and fatal('404 Not Found',

'Invalid character "%s" in the value "%s" of the query parameter "%s"',

$1, $value, $key);

} else {

$val = 1;

}

$query{$key} = $val;

}

Line 757 if ($input{tarball}) {

Line 765 if ($input{tarball}) {

}

# Clean up.

chdir("..");

rmtree($tmpexportdir);

&fatal(@fatal) if @fatal;

Line 4234 sub http_header(;$$)

Line 4243 sub http_header(;$$)

push(@headers, 'Last-Modified: ' . scalar gmtime($moddate) . ' GMT')

if $moddate;

push(@headers, 'Content-Type: ' . $content_type);

push(@headers, "Content-Security-Policy: default-src 'none'; " .

"img-src 'self'; style-src 'unsafe-inline'");

if ($allow_compress && $maycompress) {

if (HAS_ZLIB

Line 4426 sub TIEHANDLE

Line 4437 sub TIEHANDLE

crc => 0,

len => 0,

};

my ($header) = pack("c10",

my ($header) = pack("C10",

MAGIC1, MAGIC2, Compress::Zlib::Z_DEFLATED(),

0, 0, 0, 0, 0, 0, OSCODE);

print {$o->{handle}} $header;

CVSweb