mirror of
https://github.com/wownero/wownero.git
synced 2026-11-07 17:04:07 +01:00
Apply the prepared GUI security port on the current public gui branch. The complete Git tree equals candidate 9e9bb026d3d33a29a1607a1bce449e2583b1223f, built during private preparation, and includes the public v0.11.5.0 source.
224 lines
6.4 KiB
C++
224 lines
6.4 KiB
C++
// Copyright (c) 2006-2013, Andrey N. Sabelnikov, www.sabelnikov.net
|
|
// All rights reserved.
|
|
//
|
|
// Redistribution and use in source and binary forms, with or without
|
|
// modification, are permitted provided that the following conditions are met:
|
|
// * Redistributions of source code must retain the above copyright
|
|
// notice, this list of conditions and the following disclaimer.
|
|
// * Redistributions in binary form must reproduce the above copyright
|
|
// notice, this list of conditions and the following disclaimer in the
|
|
// documentation and/or other materials provided with the distribution.
|
|
// * Neither the name of the Andrey N. Sabelnikov nor the
|
|
// names of its contributors may be used to endorse or promote products
|
|
// derived from this software without specific prior written permission.
|
|
//
|
|
// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
|
|
// ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
|
// WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
// DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER BE LIABLE FOR ANY
|
|
// DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
// (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
// LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
|
|
// ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
|
|
// SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
//
|
|
|
|
|
|
|
|
#pragma once
|
|
#include "memwipe.h"
|
|
|
|
#include <boost/utility/string_view.hpp>
|
|
|
|
#include <string>
|
|
#include <utility>
|
|
#include <list>
|
|
#include <cstdint>
|
|
|
|
#undef MONERO_DEFAULT_LOG_CATEGORY
|
|
#define MONERO_DEFAULT_LOG_CATEGORY "net.http"
|
|
|
|
namespace epee
|
|
{
|
|
namespace net_utils
|
|
{
|
|
namespace http
|
|
{
|
|
|
|
enum http_method{
|
|
http_method_options,
|
|
http_method_get,
|
|
http_method_post,
|
|
http_method_put,
|
|
http_method_head,
|
|
http_method_etc,
|
|
http_method_unknown
|
|
};
|
|
|
|
enum http_content_type
|
|
{
|
|
http_content_type_text_html,
|
|
http_content_type_image_gif,
|
|
http_content_type_other,
|
|
http_content_type_not_set
|
|
};
|
|
|
|
typedef std::list<std::pair<std::string, std::string> > fields_list;
|
|
|
|
std::string get_value_from_fields_list(const std::string& param_name, const net_utils::http::fields_list& fields);
|
|
|
|
std::string get_value_from_uri_line(const std::string& param_name, const std::string& uri);
|
|
|
|
static inline void add_field(std::string& out, boost::string_view name, boost::string_view value)
|
|
{
|
|
out.append(name.data(), name.size()).append(": ");
|
|
out.append(value.data(), value.size()).append("\r\n");
|
|
}
|
|
static inline void add_field(std::string& out, const std::pair<std::string, std::string>& field)
|
|
{
|
|
add_field(out, field.first, field.second);
|
|
}
|
|
|
|
namespace detail
|
|
{
|
|
inline bool parse_header_line(boost::string_view line, boost::string_view& name, boost::string_view& value)
|
|
{
|
|
if(!line.empty() && line.back() == '\r')
|
|
line.remove_suffix(1);
|
|
if(line.empty())
|
|
return false;
|
|
if(line.front() == ' ' || line.front() == '\t')
|
|
return false;
|
|
|
|
const size_t colon = line.find(':');
|
|
if(colon == boost::string_view::npos || colon == 0)
|
|
return false;
|
|
|
|
name = line.substr(0, colon);
|
|
value = line.substr(colon + 1);
|
|
while(!value.empty() && (value.front() == ' ' || value.front() == '\t'))
|
|
value.remove_prefix(1);
|
|
while(!value.empty() && (value.back() == ' ' || value.back() == '\t'))
|
|
value.remove_suffix(1);
|
|
|
|
for(char c : name)
|
|
{
|
|
const bool alnum = (c >= 'A' && c <= 'Z') || (c >= 'a' && c <= 'z') || (c >= '0' && c <= '9');
|
|
const bool allowed = alnum ||
|
|
c == '!' || c == '#' || c == '$' || c == '%' || c == '&' ||
|
|
c == '\'' || c == '*' || c == '+' || c == '-' || c == '.' ||
|
|
c == '^' || c == '_' || c == '`' || c == '|' || c == '~';
|
|
if(!allowed)
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
}
|
|
|
|
struct http_header_info
|
|
{
|
|
std::string m_connection; //"Connection:"
|
|
std::string m_referer; //"Referer:"
|
|
std::string m_content_length; //"Content-Length:"
|
|
std::string m_content_type; //"Content-Type:"
|
|
std::string m_transfer_encoding;//"Transfer-Encoding:"
|
|
std::string m_content_encoding; //"Content-Encoding:"
|
|
std::string m_host; //"Host:"
|
|
std::string m_cookie; //"Cookie:"
|
|
std::string m_user_agent; //"User-Agent:"
|
|
std::string m_origin; //"Origin:"
|
|
fields_list m_etc_fields;
|
|
|
|
void clear()
|
|
{
|
|
m_connection.clear();
|
|
m_referer.clear();
|
|
m_content_length.clear();
|
|
m_content_type.clear();
|
|
m_transfer_encoding.clear();
|
|
m_content_encoding.clear();
|
|
m_host.clear();
|
|
m_cookie.clear();
|
|
m_user_agent.clear();
|
|
m_origin.clear();
|
|
m_etc_fields.clear();
|
|
}
|
|
};
|
|
|
|
struct uri_content
|
|
{
|
|
std::string m_path;
|
|
std::string m_query;
|
|
std::string m_fragment;
|
|
std::list<std::pair<std::string, std::string> > m_query_params;
|
|
};
|
|
|
|
struct url_content
|
|
{
|
|
std::string schema;
|
|
std::string host;
|
|
std::string uri;
|
|
uint64_t port;
|
|
uri_content m_uri_content;
|
|
};
|
|
|
|
|
|
struct http_request_info
|
|
{
|
|
http_request_info():m_http_method(http_method_unknown),
|
|
m_http_ver_hi(0),
|
|
m_http_ver_lo(0),
|
|
m_have_to_block(false),
|
|
m_full_request_buf_size(0)
|
|
{}
|
|
|
|
http_method m_http_method;
|
|
std::string m_URI;
|
|
std::string m_http_method_str;
|
|
std::string m_full_request_str;
|
|
std::string m_replace_html;
|
|
std::string m_request_head;
|
|
int m_http_ver_hi;
|
|
int m_http_ver_lo;
|
|
bool m_have_to_block;
|
|
http_header_info m_header_info;
|
|
uri_content m_uri_content;
|
|
size_t m_full_request_buf_size;
|
|
std::string m_body;
|
|
|
|
void clear()
|
|
{
|
|
this->~http_request_info();
|
|
new(this) http_request_info();
|
|
}
|
|
};
|
|
|
|
|
|
struct http_response_info
|
|
{
|
|
int m_response_code;
|
|
std::string m_response_comment;
|
|
fields_list m_additional_fields;
|
|
std::string m_body;
|
|
std::string m_mime_tipe;
|
|
http_header_info m_header_info;
|
|
int m_http_ver_hi;// OUT paramter only
|
|
int m_http_ver_lo;// OUT paramter only
|
|
|
|
void clear()
|
|
{
|
|
this->~http_response_info();
|
|
new(this) http_response_info();
|
|
}
|
|
|
|
void wipe()
|
|
{
|
|
memwipe(&m_body[0], m_body.size());
|
|
}
|
|
};
|
|
}
|
|
}
|
|
}
|