d3bbd1ca272f0a63e5ca0983ab643101321bc33b galt Fri Jul 13 17:13:09 2012 -0700 adding some more chars to the list of those legal in urls diff --git src/lib/htmlPage.c src/lib/htmlPage.c index ba6d142..a6b4ae1 100644 --- src/lib/htmlPage.c +++ src/lib/htmlPage.c @@ -1677,30 +1677,37 @@ AllocArray(okChars, 256); for (c=0; c<256; ++c) if (isalnum(c)) okChars[c] = 1; /* This list is a little more inclusive than W3's. */ okChars['='] = 1; okChars['-'] = 1; okChars['/'] = 1; okChars['%'] = 1; okChars['.'] = 1; okChars[';'] = 1; okChars[':'] = 1; okChars['_'] = 1; okChars['&'] = 1; okChars['+'] = 1; +okChars['('] = 1; +okChars[')'] = 1; +okChars['$'] = 1; +okChars['!'] = 1; +okChars['*'] = 1; +okChars['@'] = 1; +okChars['\''] = 1; // apparently the apostrophe itself is ok return okChars; } static void validateCgiUrl(char *url) /* Make sure URL follows basic CGI encoding rules. */ { if (startsWith("http:", url) || startsWith("https:", url)) { static char *okChars = NULL; UBYTE c, *s; if (okChars == NULL) okChars = urlOkChars(); url = strchr(url, '?'); if (url != NULL) {