1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
|
#ifndef __DILLO_MISC_H__
#define __DILLO_MISC_H__
#include <stddef.h> /* for size_t */
#include <ctype.h> /* iscntrl, isascii */
#ifdef __cplusplus
extern "C" {
#endif /* __cplusplus */
#define d_isascii(c) (((c) & ~0x7f) == 0)
char *a_Misc_escape_chars(const char *str, const char *esc_set);
int a_Misc_expand_tabs(char **start, char *end, char *buf, int buflen);
int a_Misc_get_content_type_from_data(void *Data, size_t Size,const char **PT);
int a_Misc_content_type_check(const char *EntryType, const char *DetectedType);
void a_Misc_parse_content_type(const char *str, char **major, char **minor,
char **charset);
int a_Misc_content_type_cmp(const char* ct1, const char *ct2);
int a_Misc_parse_geometry(char *geom, int *x, int *y, int *w, int *h);
int a_Misc_parse_search_url(char *source, char **label, char **urlstr);
char *a_Misc_encode_base64(const char *in);
Dstr *a_Misc_file2dstr(const char *filename);
/**
* Parse Content-Disposition string, e.g., "attachment; filename="file name.jpg"".
* Content-Disposition is defined in RFC 6266
*/
static inline void a_Misc_parse_content_disposition(const char *disposition, char **type, char **filename)
{
static const char tspecials_space[] = "()<>@,;:\\\"/[]?= ";
const char terminators[] = " ;\t";
const char *str, *s;
/* All are mandatory */
if (!disposition || !type || !filename)
return;
*type = NULL;
*filename = NULL;
str = disposition;
/* Parse the type (attachment, inline, ...) by reading alpha characters. */
for (s = str; *s && d_isascii((uchar_t)*s) && !iscntrl((uchar_t)*s) &&
!strchr(tspecials_space, *s); s++) ;
if (s != str) {
*type = dStrndup(str, s - str);
} else {
/* Cannot find type, stop here */
return;
}
/* Abort if there are no terminators after the type */
if (!strchr(terminators, *s)) {
dFree(*type);
*type = NULL;
return;
}
/* FIXME: what about "attachment ; filename=foo"? */
/* Stop if the terminator is not ; */
if (*s != ';')
return;
/* Now parse the filename */
bool_t quoted = FALSE;
const char key[] = "filename";
/* Locate "filename", if not found stop */
if ((s = dStriAsciiStr(str, key)) == NULL)
return;
/* Ensure that it is preceded by a terminator if it doesn't start the
* disposition??? */
if (s != str && !strchr(terminators, s[-1]))
return;
/* Advance s over "filename" (skipping the nul character) */
s += sizeof(key) - 1;
/* Skip blanks like "filename =..." */
while (*s == ' ' || *s == '\t')
s++;
/* Stop if there is no equal sign */
if (*s != '=')
return;
/* Skip over the equal */
s++;
/* Skip blanks after the equal like "filename= ..." */
while (*s == ' ' || *s == '\t')
s++;
size_t len = 0;
if (*s == '"') {
quoted = TRUE;
/* Skip over quote */
s++;
/* Ignore dots at the beginning of the filename */
while (*s == '.')
s++;
bool_t escaped = FALSE;
const char *c;
size_t maxlen = strlen(s);
for (size_t i = 1; i < maxlen; i++) {
/* Find closing quote not escaped */
if (s[i - 1] != '\\' && s[i] == '"') {
/* Copy i bytes, skip closing quote */
len = i;
*filename = dStrndup(s, len);
break;
}
}
} else {
/* Ignore dots at the beginning of the filename */
while (*s == '.')
s++;
if ((len = strcspn(s, terminators))) {
*filename = dStrndup(s, len);
}
}
/* No filename, stop here */
if (*filename == NULL)
return;
/* Otherwise remove invalid characters from filename */
const char invalid_characters[] = "/\\|~";
char *f = *filename, *d = *filename;
for ( ; f < *filename + len; f++) {
if (strchr(invalid_characters, *f)) {
// If this is a backslash preceding a quote, we want to just
// skip past it without advancing the destination pointer or
// copying anything.
if (!(*f == '\\' && *(f+1) == '"')) {
*d = '_';
d++;
}
} else if (!quoted && (!d_isascii((uchar_t)*f) || *f == '=')) {
dFree(*filename);
*filename = NULL;
return;
} else {
*d = *f;
d++;
}
}
// Truncate filename to deal with the string being shorter if we
// skipped over any backslash characters in the above loop
if (f != d) {
*d = '\0';
}
}
#ifdef __cplusplus
}
#endif /* __cplusplus */
#endif /* __DILLO_MISC_H__ */
|
