← Back to branch summary

~ubuntu-branches/ubuntu/hardy/awstats/hardy

« back to all changes in this revision

Viewing changes to debian/patches/0001_sanitize_more.patch

  • Committer: Bazaar Package Importer
  • Author(s): Charles Fry
  • Date: 2007-02-10 11:11:02 UTC
  • mfrom: (1.2.4 upstream)
  • Revision ID: james.westby@ubuntu.com-20070210111102-bbx43ay1krtxh1nq
Tags: 6.6+dfsg-1
http://bugs.debian.org/350987
http://bugs.debian.org/335865
New upstream release (Closes: #350987, #335865)

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/patches/0001_sanitize_more.patch
1
 
Index: awstats-6.5/wwwroot/cgi-bin/awstats.pl
2
 
===================================================================
3
 
--- awstats-6.5.orig/wwwroot/cgi-bin/awstats.pl 2005-11-24 15:11:19.000000000 -0500
4
 
+++ awstats-6.5/wwwroot/cgi-bin/awstats.pl      2006-05-06 17:34:13.000000000 -0400
5
 
@@ -5534,7 +5534,7 @@
6
 
            $QueryString =~ s/&/&/g;
7
 
        }
8
 
 
9
 
-       $QueryString = CleanFromCSSA($QueryString);
10
 
+       $QueryString = CleanFromCSSA(&DecodeEncodedString($QueryString));
11
 
 
12
 
     # Security test
13
 
        if ($QueryString =~ /LogFile=([^&]+)/i)                         { error("Logfile parameter can't be overwritten when AWStats is used from a CGI"); }
14
 
@@ -5542,7 +5542,7 @@
15
 
        # No update but report by default when run from a browser
16
 
        $UpdateStats=($QueryString=~/update=1/i?1:0);
17
 
 
18
 
-       if ($QueryString =~ /config=([^&]+)/i)                          { $SiteConfig=&DecodeEncodedString("$1"); }
19
 
+       if ($QueryString =~ /config=([^&]+)/i)                          { $SiteConfig=&Sanitize(&DecodeEncodedString("$1")); }
20
 
        if ($QueryString =~ /diricons=([^&]+)/i)                        { $DirIcons=&DecodeEncodedString("$1"); }
21
 
        if ($QueryString =~ /pluginmode=([^&]+)/i)                      { $PluginMode=&Sanitize(&DecodeEncodedString("$1"),1); }
22
 
        if ($QueryString =~ /configdir=([^&]+)/i)                       { $DirConfig=&Sanitize(&DecodeEncodedString("$1")); }
23
 
@@ -5561,7 +5561,7 @@
24
 
 
25
 
        # If migrate
26
 
        if ($QueryString =~ /(^|-|&|&)migrate=([^&]+)/i)    {
27
 
-               $MigrateStats=&DecodeEncodedString("$2"); 
28
 
+               $MigrateStats=&Sanitize(&DecodeEncodedString("$2"));
29
 
                $MigrateStats =~ /^(.*)$PROG(\d{0,2})(\d\d)(\d\d\d\d)(.*)\.txt$/;
30
 
                $SiteConfig=$5?$5:'xxx'; $SiteConfig =~ s/^\.//;                # SiteConfig is used to find config file
31
 
        }
32
 
@@ -5591,7 +5591,7 @@
33
 
        # Update with no report by default when run from command line
34
 
        $UpdateStats=1;
35
 
 
36
 
-       if ($QueryString =~ /config=([^&]+)/i)                          { $SiteConfig="$1"; }
37
 
+       if ($QueryString =~ /config=([^&]+)/i)                          { $SiteConfig=&Sanitize("$1"); }
38
 
        if ($QueryString =~ /diricons=([^&]+)/i)                        { $DirIcons="$1"; }
39
 
        if ($QueryString =~ /pluginmode=([^&]+)/i)                      { $PluginMode=&Sanitize("$1",1); }
40
 
        if ($QueryString =~ /configdir=([^&]+)/i)                       { $DirConfig=&Sanitize("$1"); }