mirror/mongoose
1
0
Fork 0
mirror of https://github.com/cesanta/mongoose.git synced 2025-08-06 13:37:34 +08:00
Code Issues Actions 4 Packages Projects Releases Wiki Activity

Merge pull request #387 from Z-Wave-Me/master

Browse Source 
Disallow WebDAV MKCOL/PUT/DELETE requests to protected files
This commit is contained in:
Sergey Lyubka 2014-06-28 21:40:11 +01:00
commit ac229b6606
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
mongoose.c
View File

@ -4266,6 +4266,8 @@ static void open_local_endpoint(struct connection *conn, int skip_user) {
close_local_endpoint(conn); close_local_endpoint(conn);
#endif #endif
#ifndef MONGOOSE_NO_DAV #ifndef MONGOOSE_NO_DAV
} else if (must_hide_file(conn, path)) {
send_http_error(conn, 404, NULL);
} else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) { } else if (!strcmp(conn->mg_conn.request_method, "PROPFIND")) {
handle_propfind(conn, path, &st, exists); handle_propfind(conn, path, &st, exists);
} else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) { } else if (!strcmp(conn->mg_conn.request_method, "MKCOL")) {