Mailing-List: contact commits-help@commons.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@commons.apache.org
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: svn commit: r866197 -
 /websites/production/commons/content/sandbox/commons-classscan/api/apidocs/index.html
Date: Wed, 19 Jun 2013 09:27:54 -0000
To: commits@commons.apache.org
From: sebb@apache.org
Message-Id: <20130619092754.BD0B52388847@eris.apache.org>

Author: sebb
Date: Wed Jun 19 09:27:54 2013
New Revision: 866197

Log:
Apply fix for CVE-2013-1571, a frame injection attack

Modified:
    websites/production/commons/content/sandbox/commons-classscan/api/apidocs/index.html

Modified: websites/production/commons/content/sandbox/commons-classscan/api/apidocs/index.html
==============================================================================
--- websites/production/commons/content/sandbox/commons-classscan/api/apidocs/index.html (original)
+++ websites/production/commons/content/sandbox/commons-classscan/api/apidocs/index.html Wed Jun 19 09:27:54 2013
@@ -13,6 +13,42 @@ ClassScan Application Programming Interf
         targetPage = targetPage.substring(1);
     if (targetPage.indexOf(":") != -1)
         targetPage = "undefined";
+    if (targetPage != "" && !validURL(targetPage))
+        targetPage = "undefined";
+    function validURL(url) {
+        var pos = url.indexOf(".html");
+        if (pos == -1 || pos != url.length - 5)
+            return false;
+        var allowNumber = false;
+        var allowSep = false;
+        var seenDot = false;
+        for (var i = 0; i < url.length - 5; i++) {
+            var ch = url.charAt(i);
+            if ('a' <= ch && ch <= 'z' ||
+                    'A' <= ch && ch <= 'Z' ||
+                    ch == '$' ||
+                    ch == '_') {
+                allowNumber = true;
+                allowSep = true;
+            } else if ('0' <= ch && ch <= '9'
+                    || ch == '-') {
+                if (!allowNumber)
+                     return false;
+            } else if (ch == '/' || ch == '.') {
+                if (!allowSep)
+                    return false;
+                allowNumber = false;
+                allowSep = false;
+                if (ch == '.')
+                     seenDot = true;
+                if (ch == '/' && seenDot)
+                     return false;
+            } else {
+                return false;
+            }
+        }
+        return true;
+    }
     function loadFrames() {
         if (targetPage != "" && targetPage != "undefined")
              top.classFrame.location = top.targetPage;