indymedia
/
epicyon
mirror of https://gitlab.com/bashrc2/epicyon
7
4
Fork 1
Code Issues 14 Releases Wiki Activity

Check post length before and after

merge-requests/6/head
Bob Mottram 2019-11-16 00:07:07 +00:00
parent b583869938
commit 94a3f1c2b1
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
daemon.py
View File

@ -4614,7 +4614,25 @@ class PubServer(BaseHTTPRequestHandler):
if self.server.debug:
print('DEBUG: Reading message')
# check content length before reading bytes
if self.path == '/sharedInbox' or self.path == '/inbox':
length=0
if self.headers.get('Content-length'):
length = int(self.headers['Content-length'])
if self.headers.get('Content-Length'):
length = int(self.headers['Content-Length'])
if self.headers.get('content-length'):
length = int(self.headers['content-length'])
if length>10240:
print('WARN: post to shared inbox is too long '+str(length)+' bytes')
self._400()
self.server.POSTbusy=False
self._benchmarkPOST(POSTstartTime,125)
return
messageBytes=self.rfile.read(length)
# check content length after reading bytes
if self.path == '/sharedInbox' or self.path == '/inbox':
lenMessage=len(messageBytes)
if lenMessage>10240: