Changeset 731 in code for trunk

Timestamp:

Dec 1, 2021, 2:57:54 PM (4 years ago)

Author:

contact

Message:

Validate address in user.checkNetwork

File:

• trunk/user.go (modified) (2 diffs)

trunk/user.go

@@ -783 +783 @@
 
 func (u *user) checkNetwork(record *Network) error {
+        url, err := record.URL()
+        if err != nil {
+                return err
+        }
+        if url.User != nil {
+                return fmt.Errorf("%v:// URL must not have username and password information", url.Scheme)
+        }
+        if url.RawQuery != "" {
+                return fmt.Errorf("%v:// URL must not have query values", url.Scheme)
+        }
+        if url.Fragment != "" {
+                return fmt.Errorf("%v:// URL must not have a fragment", url.Scheme)
+        }
+        switch url.Scheme {
+        case "ircs", "irc+insecure":
+                if url.Host == "" {
+                        return fmt.Errorf("%v:// URL must have a host", url.Scheme)
+                }
+                if url.Path != "" {
+                        return fmt.Errorf("%v:// URL must not have a path", url.Scheme)
+                }
+        case "irc+unix", "unix":
+                if url.Host != "" {
+                        return fmt.Errorf("%v:// URL must not have a host", url.Scheme)
+                }
+                if url.Path == "" {
+                        return fmt.Errorf("%v:// URL must have a path", url.Scheme)
+                }
+        default:
+                return fmt.Errorf("unknown URL scheme %q", url.Scheme)
+        }
+
         for _, net := range u.networks {
                 if net.GetName() == record.GetName() && net.ID != record.ID {
@@ -788 +820 @@
                 }
         }
+
         return nil
 }