改善 http 服务请求路径相关的一些缺陷 #718
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
add hv_normalize_path function to hbase.h support http legal relative path request optimize http server path file cache map key fix false positives '/..file' normal path bug
ithewei
reviewed
Apr 16, 2025
| std::string path = req->Path(); | ||
| const char* req_path = path.c_str(); | ||
| // path safe check | ||
| if (req_path[0] != '/' || strstr(req_path, "/..") || strstr(req_path, "\\..")) { |
There was a problem hiding this comment.
这里删除了默认的path safe check，会造成能够访问任意上级目录文件
There was a problem hiding this comment.
hv_normalize_path 函数的处理不会允许访问不合法的上级目录
其中包括下面这段代码片段
while (--pos > 0) {
if (path[pos - 1] == '/') break;
}
if (pos < 1) return 0;
此处对相对父目录的处理是不会允许超出path / 根目录以上的目录层级，而且规范化处理后的path也是不存在/.. \..此类字符串存在的。
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
添加 hv_normalize_path 函数到 hbase.h
实用的文件路径规范化修剪处理函数，解决路径相关缺陷的关键实现。
支持 http 合法相对路径请求
优化 http 服务器相对路径文件缓存映射键
因为内部文件缓存map的key是文件路径，而未经规范化处理的路径格式存在对相同的文件形成无数种字符变化，易造成原本个位数的真实有效文件被外网恶意请求分配出无数个文件缓存造成内存影响，同时也避免了Windows相比Linux的路径兼容性严格程度不同导致的末尾反斜杠不应该访问成功的请求却能够open成功。
修复误报“/..file”正常文件路径 bug
某些文件确实前面几个点符号造成被误判为相对父路径从而终止了请求。