author | Lars Hjemli <hjemli@gmail.com> | 2011-03-05 12:47:04 (UTC) |
---|---|---|
committer | Lars Hjemli <hjemli@gmail.com> | 2011-03-05 12:50:40 (UTC) |
commit | d0cb8413ffd5319c623d832802abe6a6d5795679 (patch) (unidiff) | |
tree | bb040f593116313a355840bed4a14d4bff0ca4fd | |
parent | fc384b16fb9787380746000d3cea2d53fccc548e (diff) | |
download | cgit-d0cb8413ffd5319c623d832802abe6a6d5795679.zip cgit-d0cb8413ffd5319c623d832802abe6a6d5795679.tar.gz cgit-d0cb8413ffd5319c623d832802abe6a6d5795679.tar.bz2 |
Avoid trailing slash in virtual-root
When setting virtual-root from cgitrc, care is taken to avoid trailing
slashes. But when no virtual-root setting is specified, SCRIPT_FILE
from the web server is used without similar checks. This patch fixes the
inconsistency, which could lead to double-slashes in generated links.
Noticed-by: Wouter Van Hemel <wouter@duodecim.org>
Signed-off-by: Lars Hjemli <hjemli@gmail.com>
-rw-r--r-- | cgit.c | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -586,133 +586,134 @@ static void process_cached_repolist(const char *path) | |||
586 | exit(generate_cached_repolist(path, cached_rc)); | 586 | exit(generate_cached_repolist(path, cached_rc)); |
587 | } | 587 | } |
588 | 588 | ||
589 | static void cgit_parse_args(int argc, const char **argv) | 589 | static void cgit_parse_args(int argc, const char **argv) |
590 | { | 590 | { |
591 | int i; | 591 | int i; |
592 | int scan = 0; | 592 | int scan = 0; |
593 | 593 | ||
594 | for (i = 1; i < argc; i++) { | 594 | for (i = 1; i < argc; i++) { |
595 | if (!strncmp(argv[i], "--cache=", 8)) { | 595 | if (!strncmp(argv[i], "--cache=", 8)) { |
596 | ctx.cfg.cache_root = xstrdup(argv[i]+8); | 596 | ctx.cfg.cache_root = xstrdup(argv[i]+8); |
597 | } | 597 | } |
598 | if (!strcmp(argv[i], "--nocache")) { | 598 | if (!strcmp(argv[i], "--nocache")) { |
599 | ctx.cfg.nocache = 1; | 599 | ctx.cfg.nocache = 1; |
600 | } | 600 | } |
601 | if (!strcmp(argv[i], "--nohttp")) { | 601 | if (!strcmp(argv[i], "--nohttp")) { |
602 | ctx.env.no_http = "1"; | 602 | ctx.env.no_http = "1"; |
603 | } | 603 | } |
604 | if (!strncmp(argv[i], "--query=", 8)) { | 604 | if (!strncmp(argv[i], "--query=", 8)) { |
605 | ctx.qry.raw = xstrdup(argv[i]+8); | 605 | ctx.qry.raw = xstrdup(argv[i]+8); |
606 | } | 606 | } |
607 | if (!strncmp(argv[i], "--repo=", 7)) { | 607 | if (!strncmp(argv[i], "--repo=", 7)) { |
608 | ctx.qry.repo = xstrdup(argv[i]+7); | 608 | ctx.qry.repo = xstrdup(argv[i]+7); |
609 | } | 609 | } |
610 | if (!strncmp(argv[i], "--page=", 7)) { | 610 | if (!strncmp(argv[i], "--page=", 7)) { |
611 | ctx.qry.page = xstrdup(argv[i]+7); | 611 | ctx.qry.page = xstrdup(argv[i]+7); |
612 | } | 612 | } |
613 | if (!strncmp(argv[i], "--head=", 7)) { | 613 | if (!strncmp(argv[i], "--head=", 7)) { |
614 | ctx.qry.head = xstrdup(argv[i]+7); | 614 | ctx.qry.head = xstrdup(argv[i]+7); |
615 | ctx.qry.has_symref = 1; | 615 | ctx.qry.has_symref = 1; |
616 | } | 616 | } |
617 | if (!strncmp(argv[i], "--sha1=", 7)) { | 617 | if (!strncmp(argv[i], "--sha1=", 7)) { |
618 | ctx.qry.sha1 = xstrdup(argv[i]+7); | 618 | ctx.qry.sha1 = xstrdup(argv[i]+7); |
619 | ctx.qry.has_sha1 = 1; | 619 | ctx.qry.has_sha1 = 1; |
620 | } | 620 | } |
621 | if (!strncmp(argv[i], "--ofs=", 6)) { | 621 | if (!strncmp(argv[i], "--ofs=", 6)) { |
622 | ctx.qry.ofs = atoi(argv[i]+6); | 622 | ctx.qry.ofs = atoi(argv[i]+6); |
623 | } | 623 | } |
624 | if (!strncmp(argv[i], "--scan-tree=", 12) || | 624 | if (!strncmp(argv[i], "--scan-tree=", 12) || |
625 | !strncmp(argv[i], "--scan-path=", 12)) { | 625 | !strncmp(argv[i], "--scan-path=", 12)) { |
626 | /* HACK: the global snapshot bitmask defines the | 626 | /* HACK: the global snapshot bitmask defines the |
627 | * set of allowed snapshot formats, but the config | 627 | * set of allowed snapshot formats, but the config |
628 | * file hasn't been parsed yet so the mask is | 628 | * file hasn't been parsed yet so the mask is |
629 | * currently 0. By setting all bits high before | 629 | * currently 0. By setting all bits high before |
630 | * scanning we make sure that any in-repo cgitrc | 630 | * scanning we make sure that any in-repo cgitrc |
631 | * snapshot setting is respected by scan_tree(). | 631 | * snapshot setting is respected by scan_tree(). |
632 | * BTW: we assume that there'll never be more than | 632 | * BTW: we assume that there'll never be more than |
633 | * 255 different snapshot formats supported by cgit... | 633 | * 255 different snapshot formats supported by cgit... |
634 | */ | 634 | */ |
635 | ctx.cfg.snapshots = 0xFF; | 635 | ctx.cfg.snapshots = 0xFF; |
636 | scan++; | 636 | scan++; |
637 | scan_tree(argv[i] + 12, repo_config); | 637 | scan_tree(argv[i] + 12, repo_config); |
638 | } | 638 | } |
639 | } | 639 | } |
640 | if (scan) { | 640 | if (scan) { |
641 | qsort(cgit_repolist.repos, cgit_repolist.count, | 641 | qsort(cgit_repolist.repos, cgit_repolist.count, |
642 | sizeof(struct cgit_repo), cmp_repos); | 642 | sizeof(struct cgit_repo), cmp_repos); |
643 | print_repolist(stdout, &cgit_repolist, 0); | 643 | print_repolist(stdout, &cgit_repolist, 0); |
644 | exit(0); | 644 | exit(0); |
645 | } | 645 | } |
646 | } | 646 | } |
647 | 647 | ||
648 | static int calc_ttl() | 648 | static int calc_ttl() |
649 | { | 649 | { |
650 | if (!ctx.repo) | 650 | if (!ctx.repo) |
651 | return ctx.cfg.cache_root_ttl; | 651 | return ctx.cfg.cache_root_ttl; |
652 | 652 | ||
653 | if (!ctx.qry.page) | 653 | if (!ctx.qry.page) |
654 | return ctx.cfg.cache_repo_ttl; | 654 | return ctx.cfg.cache_repo_ttl; |
655 | 655 | ||
656 | if (ctx.qry.has_symref) | 656 | if (ctx.qry.has_symref) |
657 | return ctx.cfg.cache_dynamic_ttl; | 657 | return ctx.cfg.cache_dynamic_ttl; |
658 | 658 | ||
659 | if (ctx.qry.has_sha1) | 659 | if (ctx.qry.has_sha1) |
660 | return ctx.cfg.cache_static_ttl; | 660 | return ctx.cfg.cache_static_ttl; |
661 | 661 | ||
662 | return ctx.cfg.cache_repo_ttl; | 662 | return ctx.cfg.cache_repo_ttl; |
663 | } | 663 | } |
664 | 664 | ||
665 | int main(int argc, const char **argv) | 665 | int main(int argc, const char **argv) |
666 | { | 666 | { |
667 | const char *path; | 667 | const char *path; |
668 | char *qry; | 668 | char *qry; |
669 | int err, ttl; | 669 | int err, ttl; |
670 | 670 | ||
671 | prepare_context(&ctx); | 671 | prepare_context(&ctx); |
672 | cgit_repolist.length = 0; | 672 | cgit_repolist.length = 0; |
673 | cgit_repolist.count = 0; | 673 | cgit_repolist.count = 0; |
674 | cgit_repolist.repos = NULL; | 674 | cgit_repolist.repos = NULL; |
675 | 675 | ||
676 | cgit_parse_args(argc, argv); | 676 | cgit_parse_args(argc, argv); |
677 | parse_configfile(ctx.env.cgit_config, config_cb); | 677 | parse_configfile(ctx.env.cgit_config, config_cb); |
678 | ctx.repo = NULL; | 678 | ctx.repo = NULL; |
679 | http_parse_querystring(ctx.qry.raw, querystring_cb); | 679 | http_parse_querystring(ctx.qry.raw, querystring_cb); |
680 | 680 | ||
681 | /* If virtual-root isn't specified in cgitrc, lets pretend | 681 | /* If virtual-root isn't specified in cgitrc, lets pretend |
682 | * that virtual-root equals SCRIPT_NAME. | 682 | * that virtual-root equals SCRIPT_NAME, minus any possibly |
683 | * trailing slashes. | ||
683 | */ | 684 | */ |
684 | if (!ctx.cfg.virtual_root) | 685 | if (!ctx.cfg.virtual_root) |
685 | ctx.cfg.virtual_root = ctx.cfg.script_name; | 686 | ctx.cfg.virtual_root = trim_end(ctx.cfg.script_name, '/'); |
686 | 687 | ||
687 | /* If no url parameter is specified on the querystring, lets | 688 | /* If no url parameter is specified on the querystring, lets |
688 | * use PATH_INFO as url. This allows cgit to work with virtual | 689 | * use PATH_INFO as url. This allows cgit to work with virtual |
689 | * urls without the need for rewriterules in the webserver (as | 690 | * urls without the need for rewriterules in the webserver (as |
690 | * long as PATH_INFO is included in the cache lookup key). | 691 | * long as PATH_INFO is included in the cache lookup key). |
691 | */ | 692 | */ |
692 | path = ctx.env.path_info; | 693 | path = ctx.env.path_info; |
693 | if (!ctx.qry.url && path) { | 694 | if (!ctx.qry.url && path) { |
694 | if (path[0] == '/') | 695 | if (path[0] == '/') |
695 | path++; | 696 | path++; |
696 | ctx.qry.url = xstrdup(path); | 697 | ctx.qry.url = xstrdup(path); |
697 | if (ctx.qry.raw) { | 698 | if (ctx.qry.raw) { |
698 | qry = ctx.qry.raw; | 699 | qry = ctx.qry.raw; |
699 | ctx.qry.raw = xstrdup(fmt("%s?%s", path, qry)); | 700 | ctx.qry.raw = xstrdup(fmt("%s?%s", path, qry)); |
700 | free(qry); | 701 | free(qry); |
701 | } else | 702 | } else |
702 | ctx.qry.raw = xstrdup(ctx.qry.url); | 703 | ctx.qry.raw = xstrdup(ctx.qry.url); |
703 | cgit_parse_url(ctx.qry.url); | 704 | cgit_parse_url(ctx.qry.url); |
704 | } | 705 | } |
705 | 706 | ||
706 | ttl = calc_ttl(); | 707 | ttl = calc_ttl(); |
707 | ctx.page.expires += ttl*60; | 708 | ctx.page.expires += ttl*60; |
708 | if (ctx.env.request_method && !strcmp(ctx.env.request_method, "HEAD")) | 709 | if (ctx.env.request_method && !strcmp(ctx.env.request_method, "HEAD")) |
709 | ctx.cfg.nocache = 1; | 710 | ctx.cfg.nocache = 1; |
710 | if (ctx.cfg.nocache) | 711 | if (ctx.cfg.nocache) |
711 | ctx.cfg.cache_size = 0; | 712 | ctx.cfg.cache_size = 0; |
712 | err = cache_process(ctx.cfg.cache_size, ctx.cfg.cache_root, | 713 | err = cache_process(ctx.cfg.cache_size, ctx.cfg.cache_root, |
713 | ctx.qry.raw, ttl, process_request, &ctx); | 714 | ctx.qry.raw, ttl, process_request, &ctx); |
714 | if (err) | 715 | if (err) |
715 | cgit_print_error(fmt("Error processing page: %s (%d)", | 716 | cgit_print_error(fmt("Error processing page: %s (%d)", |
716 | strerror(err), err)); | 717 | strerror(err), err)); |
717 | return err; | 718 | return err; |
718 | } | 719 | } |