nordic-dev.net/nix
nordic-dev.net/nix
2
0
Fork 0
mirror of https://github.com/NixOS/nix.git synced 2024-11-22 23:02:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

isAllowedURI: Format

Browse Source 
(cherry picked from commit 1fa958dda1)
This commit is contained in:
Robert Hensing 2023-12-06 14:08:22 +01:00
parent ec5e4041ba
commit 4795569bf7
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/libexpr/eval.cc
View File

@ -657,11 +657,14 @@ bool isAllowedURI(std::string_view uri, const Strings & allowedUris)
prefix. Thus, the prefix https://github.co does not permit
access to https://github.com. */
for (auto & prefix : allowedUris) {
if (uri == prefix ||
(uri.size() > prefix.size()
&& prefix.size() > 0
&& hasPrefix(uri, prefix)
&& (prefix[prefix.size() - 1] == '/' || uri[prefix.size()] == '/')))
if (uri == prefix
// Allow access to subdirectories of the prefix.
|| (uri.size() > prefix.size()
&& prefix.size() > 0
&& hasPrefix(uri, prefix)
&& (
prefix[prefix.size() - 1] == '/'
|| uri[prefix.size()] == '/')))
return true;
}