From f12a063a4017ae8c5e403afb89eda6d585c5d8dc Mon Sep 17 00:00:00 2001 From: Paul Kulchenko Date: Tue, 17 Aug 2021 19:36:07 -0700 Subject: [PATCH] Update ProgramRedirect to check location validity --- tool/net/redbean.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tool/net/redbean.c b/tool/net/redbean.c index fa8e95838..84dbddd98 100644 --- a/tool/net/redbean.c +++ b/tool/net/redbean.c @@ -750,6 +750,12 @@ static void ProgramRedirect(int code, const char *sp, size_t sn, const char *dp, fprintf(stderr, "error: unsupported redirect code %d\n", code); exit(1); } + + if (!(FreeLater(EncodeHttpHeaderValue(dp, dn, 0)))) { + fprintf(stderr, "error: invalid location %s\n", dp); + exit(1); + } + r.code = code; r.path.s = sp; r.path.n = sn;