From c53b444e20cc1f9e7ef3672bf9f88943a0d359d7 Mon Sep 17 00:00:00 2001 From: Kim Holviala Date: Fri, 16 Jun 2017 09:10:06 +0300 Subject: [PATCH] hURL redirect pages now support https:// --- file.c | 1 + 1 file changed, 1 insertion(+) diff --git a/file.c b/file.c index 9713020..34b838a 100644 --- a/file.c +++ b/file.c @@ -109,6 +109,7 @@ void url_redirect(state *st) sstrlcpy(dest, st->req_selector + 4); if (sstrncmp(dest, "http://") != MATCH && + sstrncmp(dest, "https://") != MATCH && sstrncmp(dest, "ftp://") != MATCH && sstrncmp(dest, "mailto:") != MATCH) die(st, ERR_ACCESS, "Refusing to HTTP redirect unsafe protocols");