[svn] Allow more characters in attribute name.

Published in <sxsr8wi9jeo.fsf@florida.arsdigita.de>.
This commit is contained in:
hniksic 2001-06-18 11:49:33 -07:00
parent e1f4cff68c
commit e98fca84a3
2 changed files with 14 additions and 2 deletions

View File

@ -1,3 +1,8 @@
2001-06-18 Hrvoje Niksic <hniksic@arsdigita.com>
* cookies.c (ATTR_NAME_CHAR): Allow almost any character to be in
an attribute name.
2001-06-18 Hrvoje Niksic <hniksic@arsdigita.com>
* url.c (url_filename): Make sure that slashes that sneak in to

View File

@ -418,9 +418,16 @@ update_cookie_field (struct cookie *cookie,
#undef NAME_IS
/* Returns non-zero for characters that are legal in the name of an
attribute. */
attribute. This used to allow only alphanumerics, '-', and '_',
but we need to be more lenient because a number of sites wants to
use weirder attribute names. rfc2965 "informally specifies"
attribute name (token) as "a sequence of non-special, non-white
space characters". So we allow everything except the stuff we know
could harm us. */
#define ATTR_NAME_CHAR(c) (ISALNUM (c) || (c) == '-' || (c) == '_')
#define ATTR_NAME_CHAR(c) ((c) > 32 && (c) < 127 \
&& (c) != '"' && (c) != '=' \
&& (c) != ';' && (c) != ',')
/* Fetch the next character without doing anything special if CH gets
set to 0. (The code executed next is expected to handle it.) */