ELOG/elog
0
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Don't show full path if file not found for security reasons

Browse Source
This commit is contained in:
ritt
2021-01-08 13:46:49 +01:00
parent 0f271ef6f3
commit 395e101add
1 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/elogd.c
+7 -6
View File
@@ -8480,16 +8480,16 @@ void send_file_direct(char *file_name) {
close(fh);
} else {
char encodedname[256];
char encodedname[256], str[256];
show_html_header(NULL, FALSE, "404 Not Found", TRUE, FALSE, NULL, FALSE, 0);
rsprintf("<body><h1>Not Found</h1>\r\n");
rsprintf("<body><h1>404 Not Found</h1>\r\n");
rsprintf("The requested file <b>");
strencode2(encodedname, file_name, sizeof(encodedname));
if (strchr(file_name, DIR_SEPARATOR))
rsprintf("%s", encodedname);
if (strrchr(encodedname, DIR_SEPARATOR))
rsprintf("%s", strrchr(encodedname, DIR_SEPARATOR)+1, sizeof(str));
else
rsprintf("%s%c%s", dir, DIR_SEPARATOR, encodedname);
rsprintf("%s", encodedname);
rsprintf("</b> was not found on this server<p>\r\n");
return_length = strlen_retbuf;
keep_alive = FALSE;
@@ -29528,7 +29528,8 @@ SSL_CTX *init_ssl(void) {
SSL_CTX_set_options(ctx, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 |
SSL_OP_NO_TLSv1 | SSL_OP_NO_TLSv1_1);
if (SSL_CTX_set_cipher_list(ctx, "ALL:!NULL-MD5:!NULL-SHA:!NULL-RSA") <= 0) {
if (SSL_CTX_set_cipher_list(ctx,
"ECDH+AESGCM:ECDH+AES256:ECDH+AES:DH+AESGCM:DH+AES256:DH+AES:!aNULL:!ADH:!DSS:!kDH:!kECDH") <= 0) {
eprintf("Error setting the cipher list.\n");
return NULL;
}