389580 don't allow escaped null bytes in URLs for external protocol handlers

r=bzbarsky sr=dveditz
This commit is contained in:
cbiesinger@gmx.at 2007-07-25 15:48:00 -07:00
parent 3124089291
commit ba69ba85c9

View File

@ -1215,6 +1215,9 @@ NS_IMETHODIMP nsExternalHelperAppService::LoadURI(nsIURI * aURL, nsIPrompt * aPr
nsCAutoString spec;
aURL->GetSpec(spec);
if (spec.Find("%00") != -1)
return NS_ERROR_MALFORMED_URI;
spec.ReplaceSubstring("\"", "%22");
spec.ReplaceSubstring("`", "%60");