diff options
| author |  Adam Chlipala <adam@chlipala.net> | 2011-01-06 12:49:14 -0500 |
|---|---|---|
| committer | Adam Chlipala <adam@chlipala.net> | 2011-01-06 12:49:14 -0500 |
| commit | e2ce533559f5669a13d663c74d65610079162448 (patch) | |
| tree | 83d7e73c2d9f50544d97d79f358b9aa267f6183a | |
| parent | ede0d18f8ce0f39b1458f201d144682e2d52ca5b (diff) | |
Ignore unknown names in query string name-value pairs; allow any side effects by Extern URLs, without signature checking
| -rw-r--r-- | src/c/urweb.c | 8 | ||||
| -rw-r--r-- | src/cjr_print.sml | 2 |
2 files changed, 3 insertions, 7 deletions
diff --git a/src/c/urweb.c b/src/c/urweb.c index c40890a5..b69fa31e 100644 --- a/src/c/urweb.c +++ b/src/c/urweb.c @@ -927,12 +927,8 @@ int uw_set_input(uw_context ctx, const char *name, char *value) { } else { int n = ctx->app->input_num(name); - if (n < 0) { - if (!strcmp(name, "null")) - return 0; - uw_set_error(ctx, "Bad input name %s", name); - return -1; - } + if (n < 0) + return 0; if (n >= ctx->app->inputs_len) { uw_set_error(ctx, "For input name %s, index %d is out of range", name, n); diff --git a/src/cjr_print.sml b/src/cjr_print.sml index 4237fd90..832af7eb 100644 --- a/src/cjr_print.sml +++ b/src/cjr_print.sml @@ -2588,7 +2588,7 @@ fun p_file env (ds, ps) = Link => false | Action ef => ef = ReadCookieWrite | Rpc ef => ef = ReadCookieWrite - | Extern ef => ef = ReadCookieWrite + | Extern _ => false val s = case Settings.getUrlPrefix () of |