1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
|
#ifndef __DILLO_MISC_H__
#define __DILLO_MISC_H__
#include <stddef.h> /* for size_t */
#include <ctype.h> /* iscntrl, isascii */
#ifdef __cplusplus
extern "C" {
#endif /* __cplusplus */
#define d_isascii(c) (((c) & ~0x7f) == 0)
char *a_Misc_escape_chars(const char *str, const char *esc_set);
int a_Misc_expand_tabs(char **start, char *end, char *buf, int buflen);
int a_Misc_get_content_type_from_data(void *Data, size_t Size,const char **PT);
int a_Misc_content_type_check(const char *EntryType, const char *DetectedType);
void a_Misc_parse_content_type(const char *str, char **major, char **minor,
char **charset);
int a_Misc_content_type_cmp(const char* ct1, const char *ct2);
int a_Misc_parse_geometry(char *geom, int *x, int *y, int *w, int *h);
int a_Misc_parse_search_url(char *source, char **label, char **urlstr);
char *a_Misc_encode_base64(const char *in);
Dstr *a_Misc_file2dstr(const char *filename);
/**
* Parse Content-Disposition string, e.g., "attachment; filename="file name.jpg"".
* Content-Disposition is defined in RFC 6266
*/
static inline void a_Misc_parse_content_disposition(const char *disposition, char **type, char **filename)
{
static const char tspecials_space[] = "()<>@,;:\\\"/[]?= ";
const char terminators[] = " ;\t";
const char *str, *s;
/* All are mandatory */
if (!disposition || !type || !filename)
return;
*type = NULL;
*filename = NULL;
str = disposition;
/* Parse the type (attachment, inline, ...) by reading alpha characters. */
for (s = str; *s && d_isascii((uchar_t)*s) && !iscntrl((uchar_t)*s) &&
!strchr(tspecials_space, *s); s++) ;
if (s != str) {
*type = dStrndup(str, s - str);
} else {
/* Cannot find type, stop here */
return;
}
/* Abort if there are no terminators after the type */
if (!strchr(terminators, *s)) {
dFree(*type);
*type = NULL;
return;
}
/* FIXME: what about "attachment ; filename=foo"? */
/* Stop if the terminator is not ; */
if (*s != ';')
return;
/* Now parse the filename */
bool_t quoted = FALSE;
const char key[] = "filename";
/* Locate "filename", if not found stop */
if ((s = dStriAsciiStr(str, key)) == NULL)
return;
/* Ensure that it is preceded by a terminator if it doesn't start the
* disposition??? */
if (s != str && !strchr(terminators, s[-1]))
return;
/* Advance s over "filename" (skipping the nul character) */
s += sizeof(key) - 1;
/* Skip blanks like "filename =..." */
while (*s == ' ' || *s == '\t')
s++;
/* Stop if there is no equal sign */
if (*s != '=')
return;
/* Skip over the equal */
s++;
/* Skip blanks after the equal like "filename= ..." */
while (*s == ' ' || *s == '\t')
s++;
size_t len = 0;
if (*s == '"') {
quoted = TRUE;
/* Skip over quote */
s++;
/* Ignore dots at the beginning of the filename */
while (*s == '.')
s++;
size_t maxlen = strlen(s);
/* Must have at least two characters left */
if (maxlen < 2)
return;
for (size_t i = 1; i < maxlen; i++) {
/* Find closing quote not escaped */
if (s[i - 1] != '\\' && s[i] == '"') {
/* Copy i bytes, skip closing quote */
len = i;
*filename = dStrndup(s, len);
break;
}
}
} else {
/* Ignore dots at the beginning of the filename */
while (*s == '.')
s++;
/* Keep filename until we find a terminator */
if ((len = strcspn(s, terminators))) {
*filename = dStrndup(s, len);
}
}
/* No filename, stop here */
if (*filename == NULL)
return;
/* Otherwise remove bad characters from filename */
const char bad_characters[] = "/\\|~";
/* Make a copy */
char *src = dStrndup(*filename, len);
char *dst = *filename;
int bad = 0;
size_t j = 0;
for (size_t i = 0; i < len; i++) {
int c = src[i];
if (i + 1 < len && c == '\\' && src[i + 1] == '\"') {
/* Found \", copy the quote only */
dst[j++] = '"';
i++; /* Skip quote in src */
} else if (strchr(bad_characters, c)) {
/* Bad character, replace with '_' */
dst[j++] = '_';
} else if (!quoted && (!d_isascii((uchar_t) c) || c == '=')) {
/* Found non-ascii character or '=', disregard */
bad = 1;
break;
} else {
/* Character is fine, just copy as-is */
dst[j++] = src[i];
}
}
/* Always terminate filename */
dst[j] = '\0';
dFree(src);
if (bad) {
dFree(*filename);
*filename = NULL;
return;
}
}
#ifdef __cplusplus
}
#endif /* __cplusplus */
#endif /* __DILLO_MISC_H__ */
|
