talons

commit ac286a71ed78429e16c612161251b9ea90ccd431
parent a4a629ce824011f5ae3f0b8cb1117f9608b7f5ad
Author: Paul <paul@claws-mail.org>
Date:   Sun, 23 May 2021 12:16:40 +0100

harden link checker before accepting click

Diffstat:
M
src/textview.c
 | 
4
+++-

1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/src/textview.c b/src/textview.c
@@ -2885,7 +2885,7 @@ gboolean textview_uri_security_check(TextView *textview, ClickableText *uri)
 	gboolean retval = TRUE;
 
 	if (is_uri_string(uri->uri) == FALSE)
-		return TRUE;
+		return FALSE;
 
 	visible_str = textview_get_visible_uri(textview, uri);
 	if (visible_str == NULL)
@@ -2922,6 +2922,8 @@ gboolean textview_uri_security_check(TextView *textview, ClickableText *uri)
 		if (aval == G_ALERTALTERNATE)
 			retval = TRUE;
 	}
+	if (strlen(uri->uri) > get_uri_len(uri->uri))
+		retval = FALSE;
 
 	g_free(visible_str);