diff options
Diffstat (limited to 'lib/server.c')
-rw-r--r-- | lib/server.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/lib/server.c b/lib/server.c index 0b6e4c1f..59e664f9 100644 --- a/lib/server.c +++ b/lib/server.c @@ -243,6 +243,14 @@ lws_http_action(struct lws *wsi) break; } + /* we insist on absolute paths */ + + if (uri_ptr[0] != '/') { + lws_return_http_status(wsi, HTTP_STATUS_FORBIDDEN, NULL); + + goto bail_nuke_ah; + } + /* HTTP header had a content length? */ wsi->u.http.content_length = 0; |