diff options
| author | Richard Hughes <richard@hughsie.com> | 2019-06-10 10:48:22 +0100 |
|---|---|---|
| committer | Richard Hughes <richard@hughsie.com> | 2019-06-10 10:48:22 +0100 |
| commit | 69824ae559e2b615f432d645bc5d941581007026 (patch) | |
| tree | 2f047540acfe942d9d79752f1f605b17038d2b42 | |
| parent | 5518fc339fa0c508c1c7ab7b5d9c8fa0aaca8c4f (diff) | |
| download | appstream-glib-69824ae559e2b615f432d645bc5d941581007026.tar.gz | |
Do not allow forward or backwards slashes in <id> values
| -rw-r--r-- | libappstream-glib/as-app-validate.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/libappstream-glib/as-app-validate.c b/libappstream-glib/as-app-validate.c index 197ab40..5780f31 100644 --- a/libappstream-glib/as-app-validate.c +++ b/libappstream-glib/as-app-validate.c @@ -1131,6 +1131,11 @@ static gboolean as_app_validate_check_id_char (const gchar c) { const gchar valid[] = { '-', '_', '.', '\0' }; + const gchar invalid[] = { '/', '\\', '\0' }; + for (guint i = 0; invalid[i] != '\0'; i++) { + if (invalid[i] == c) + return FALSE; + } for (guint i = 0; valid[i] != '\0'; i++) { if (valid[i] == c) return TRUE; |