OPeNDAP Hyrax Back End Server (BES)
Updated for version 3.8.3
|
Functions to clean/scrub input for security reasons. More...
#include <BESScrub.h>
Static Public Member Functions | |
Security functions | |
static bool | command_line_arg_ok (const string &arg) |
sanitize command line arguments More... | |
static bool | size_ok (unsigned int sz, unsigned int nelem) |
sanitize the size of an array. More... | |
static bool | pathname_ok (const string &path, bool strict) |
Does the string name a potentailly valid pathname? Test the given pathname to verfiy that it is a valid name. More... | |
Functions to clean/scrub input for security reasons.
Definition at line 42 of file BESScrub.h.
|
static |
sanitize command line arguments
Test the given command line argument to protect against command injections
arg | argument to check |
Definition at line 52 of file BESScrub.cc.
Referenced by main().
|
static |
Does the string name a potentailly valid pathname? Test the given pathname to verfiy that it is a valid name.
We define this as: Contains only printable characters; and Is less then 256 characters. If strict is true, test that the pathname consists of only letters, digits, and underscore, dash and dot characters instead of the more general case where a pathname can be composed of any printable characters.
path | The pathname to test |
strict | Apply more restrictive tests (true by default) |
Definition at line 88 of file BESScrub.cc.
References BESRegex::match().
Referenced by main().
|
static |
sanitize the size of an array.
Test for integer overflow when dynamically allocating an array.
nelem | Number of elements. |
sz | size of each element. |
nelem
elements of sz
size will overflow an array. Definition at line 66 of file BESScrub.cc.
Referenced by BESRegex::search().