mirrors/git
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge branch 'jn/maint-gitweb-invalid-regexp'

Browse Source 
* jn/maint-gitweb-invalid-regexp:
  gitweb: Handle invalid regexp in regexp search
This commit is contained in:
Junio C Hamano 2012-03-01 14:44:38 -08:00
commit 6a3a3db73f
2 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
gitweb/gitweb.perl
View File

@ -1081,7 +1081,16 @@ sub evaluate_and_validate_params {
if (length($searchtext) < 2) { if (length($searchtext) < 2) {
die_error(403, "At least two characters are required for search parameter"); die_error(403, "At least two characters are required for search parameter");
} }
$search_regexp = $search_use_regexp ? $searchtext : quotemeta $searchtext; if ($search_use_regexp) {
$search_regexp = $searchtext;
if (!eval { qr/$search_regexp/; 1; }) {
(my $error = $@) =~ s/ at \S+ line \d+.*\n?//;
die_error(400, "Invalid search regexp '$search_regexp'",
esc_html($error));
}
} else {
$search_regexp = quotemeta $searchtext;
}
} }
} }

10
t/t9501-gitweb-standalone-http-status.sh
View File

@ -134,4 +134,14 @@ our $maxload = undef;
EOF EOF
# ----------------------------------------------------------------------
# invalid arguments
test_expect_success 'invalid arguments: invalid regexp (in project search)' '
gitweb_run "a=project_list;s=*\.git;sr=1" &&
grep "Status: 400" gitweb.headers &&
grep "400 - Invalid.*regexp" gitweb.body
'
test_debug 'cat gitweb.headers'
test_done test_done