summaryrefslogtreecommitdiff
path: root/content/urldb.c
diff options
context:
space:
mode:
authorVincent Sanders <vince@kyllikki.org>2016-09-20 21:45:35 +0100
committerVincent Sanders <vince@kyllikki.org>2016-09-20 21:45:35 +0100
commit1ef1edc9e0bc001f3324bc7fa616c4bd0cc79466 (patch)
tree6cd4fc9f16bb1fceae20ee497924d4b4e4030661 /content/urldb.c
parent608a18caff8d1b994ab24fa74b64885e67e6348e (diff)
downloadnetsurf-1ef1edc9e0bc001f3324bc7fa616c4bd0cc79466.tar.gz
netsurf-1ef1edc9e0bc001f3324bc7fa616c4bd0cc79466.tar.bz2
enable use of netsurf public suffix library to prevent supercookies
Diffstat (limited to 'content/urldb.c')
-rw-r--r--content/urldb.c18
1 files changed, 18 insertions, 0 deletions
diff --git a/content/urldb.c b/content/urldb.c
index 4888afcfe..b6eaf630b 100644
--- a/content/urldb.c
+++ b/content/urldb.c
@@ -94,6 +94,9 @@
#include <string.h>
#include <strings.h>
#include <time.h>
+#ifdef WITH_NSPSL
+#include <nspsl.h>
+#endif
#include "utils/inet.h"
#include "utils/nsoption.h"
@@ -3353,6 +3356,7 @@ bool urldb_set_cookie(const char *header, nsurl *url, nsurl *referer)
do {
struct cookie_internal_data *c;
+ const char *suffix;
char *dot;
size_t len;
@@ -3379,6 +3383,19 @@ bool urldb_set_cookie(const char *header, nsurl *url, nsurl *referer)
goto error;
}
+#ifdef WITH_NSPSL
+ /* check domain is not a public suffix */
+ dot = c->domain;
+ if (*dot == '.') {
+ dot++;
+ }
+ suffix = nspsl_getpublicsuffix(dot);
+ if (suffix == NULL) {
+ LOG("domain %s was a public suffix domain", dot);
+ urldb_free_cookie(c);
+ goto error;
+ }
+#else
/* 4.3.2:ii Cookie domain must contain embedded dots */
dot = strchr(c->domain + 1, '.');
if (!dot || *(dot + 1) == '\0') {
@@ -3386,6 +3403,7 @@ bool urldb_set_cookie(const char *header, nsurl *url, nsurl *referer)
urldb_free_cookie(c);
goto error;
}
+#endif
/* Domain match fetch host with cookie domain */
if (strcasecmp(lwc_string_data(host), c->domain) != 0) {