RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-26 02:37:35 +00:00
Code Issues Activity Actions

WebServer: Refuse to respond to requests for device files

Browse source 
Responding with some device files such as /dev/random never terminates,
so let's just refuse that.
This commit is contained in:
Max Wipfli 2021-06-07 16:54:38 +02:00 • committed by Andreas Kling
parent eb6adbabef
commit 450a24c8c9
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Userland/Services/WebServer/Client.cpp
View file

@ -116,6 +116,11 @@ void Client::handle_request(ReadonlyBytes raw_request)
return; return;
} }
if (file->is_device()) {
send_error_response(403, request);
return;
}
Core::InputFileStream stream { file }; Core::InputFileStream stream { file };
send_response(stream, request, Core::guess_mime_type_based_on_filename(real_path)); send_response(stream, request, Core::guess_mime_type_based_on_filename(real_path));