Fix security issue CVE-2017-6410

[taken from RedHat kdelibs patches]

Signed-off-by: Slávek Banko <slavek.banko@axis.cz>
(cherry picked from commit a3b86c2690)
pull/16/head
Slávek Banko 6 years ago
parent aae8e8d8c1
commit 8f6f381ff9

@ -446,10 +446,18 @@ namespace KPAC
if (!findObj.isValid() || !findObj.implementsCall())
throw Error( "No such function FindProxyForURL" );
KURL cleanUrl = url;
cleanUrl.setPass(QString());
cleanUrl.setUser(QString());
if (cleanUrl.protocol().lower() == "https") {
cleanUrl.setPath(QString());
cleanUrl.setQuery(QString());
}
Object thisObj;
List args;
args.append(String(url.url()));
args.append(String(url.host()));
args.append(String(cleanUrl.url()));
args.append(String(cleanUrl.host()));
Value retval = findObj.call( exec, thisObj, args );
if ( exec->hadException() ) {

Loading…
Cancel
Save