vndb/mithril-vndb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Correctly handle invalid escapes in routes

Browse source 
based on 0a5ead31c9fbd7b153c521c7f9d3df7bf826ce6c
This commit is contained in:
Stephan Hoyer 2022-02-17 10:17:49 +01:00
parent bcc61e42a9
commit 9128d4e60a
3 changed files with 23 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
api/router.js
View file

@ -12,6 +12,14 @@ var censor = require("../util/censor")
var sentinel = {}
function decodeURIComponentSave(component) {
try {
return decodeURIComponent(component)
} catch(e) {
return component
}
}
module.exports = function($window, mountRedraw) {
var callAsync = $window == null
// In case Mithril's loaded globally without the DOM, let's not break
@ -67,7 +75,7 @@ module.exports = function($window, mountRedraw) {
// since the representation is consistently a relatively poorly
// optimized cons string.
var path = prefix.concat()
.replace(/(?:%[a-f89][a-f0-9])+/gim, decodeURIComponent)
.replace(/(?:%[a-f89][a-f0-9])+/gim, decodeURIComponentSave)
.slice(route.prefix.length)
var data = parsePathname(path)