From d7c0b5cf1926c0063537f0ea789cd8f5e27955db Mon Sep 17 00:00:00 2001 From: oblikoamorale Date: Thu, 14 Jan 2016 19:11:49 +0300 Subject: [PATCH] foo_httpcontrol: More strict Allowed paths checking; Fixed excessive error messages for Browse command; 0.97.17 released. --- foo_httpcontrol/foo_httpcontrol.vcxproj | 2 +- foo_httpcontrol/readme.html | 19 ++++++-- foo_httpcontrol/src/commands.cpp | 59 ++++++++++++++++++------- foo_httpcontrol/src/config.cpp | 2 +- foo_httpcontrol/src/httpcontrol.cpp | 2 +- foo_httpcontrol/src/httpserver.cpp | 51 +++++++-------------- foo_httpcontrol/src/httpserver.h | 10 ++++- foo_httpcontrol/src/state.cpp | 27 +++++++++++ foo_httpcontrol/src/state.h | 1 + 9 files changed, 114 insertions(+), 59 deletions(-) diff --git a/foo_httpcontrol/foo_httpcontrol.vcxproj b/foo_httpcontrol/foo_httpcontrol.vcxproj index aaa260d..26f4349 100755 --- a/foo_httpcontrol/foo_httpcontrol.vcxproj +++ b/foo_httpcontrol/foo_httpcontrol.vcxproj @@ -95,7 +95,7 @@ true %(IgnoreSpecificDefaultLibraries) $(SolutionDir)lib/foobar2000/shared/shared.lib;$(SolutionDir)lib/atlmfc/lib/atls.lib;shlwapi.lib;Ws2_32.lib;%(AdditionalDependencies) - 0.97.15 + 0.97.17 NotSet diff --git a/foo_httpcontrol/readme.html b/foo_httpcontrol/readme.html index c748224..c075c93 100755 --- a/foo_httpcontrol/readme.html +++ b/foo_httpcontrol/readme.html @@ -28,7 +28,7 @@ -

foo_httpcontrol 0.97.16 13 Jan 2016

+

foo_httpcontrol 0.97.17 14 Jan 2016

https://bitbucket.org/oblikoamorale/foo_httpcontrol/wiki/Home

Warning/disclaimer: this software comes without any warranties at all. It is still in the very early development stage, and so on, and so forth, blah-blah-blah. @@ -75,11 +75,12 @@ customizing any template you are using, or even writing your very own one.

  • Opens component page in default browser. Button is inactive if server/listener isn't started.
  • Limit access to component by setting the allowed IP address. Connections initiated from other addresses will be discarded. Setting this to 0.0.0.0 allows all connections.
  • Limit access to component by defining a login/password pair. Untick to disable passwords.
    • -
  • Built-in file browser can be limited to certain paths of your file system. It is useful to simplify the browsing process or hide your secret files from prying eyes. For example, setting Allowed paths to d:\music|c:\temp\music|e:\ permits browsing only in these three file system branches.
    • +
  • Built-in file browser can be limited to certain paths of your file system. It is useful to simplify the browsing process or hide your secret files from prying eyes. For example, setting Allowed paths to d:\music|c:\temp\music|e:\ permits browsing only in these three file system branches. + To additionally access Microsoft Network, add 'Network:' and '\\' (without quotes) to allowed paths.
  • You can specify additional file extensions to be treated as playable files by built-in file browser. It is required for opening archives containing playable files.
  • Ignore files with specific extensions in file browser.
  • Urls of specified protocols are allowed to be enqueued by Browse command. Enables enqueueing of urls handled by 3rd party components like foo_youtube (3dydfy protocol).
    -Suggested value setting: http|https
    • +Suggested value: http|https
  • Removes all files which foobar2000 core considers unplayable from built-in file browser.
  • Specifies path where component will look for template files. Pressing Open opens specified or default directory in Explorer. If not sure, leave it blank.
  • Enables gzip compression of component output. Enabling it is usually harmless and quite beneficial as component generates a lot of text which is very compressible. Disable if you are using some funky browser and having unexpected problems.
    • @@ -94,6 +95,12 @@ Don't forget to press Apply or your changes won't have any effect until fb2k is http://www.hydrogenaudio.org/forums/index.php?showtopic=62218

    Changes history 2016

    +

    v0.97.17 14 Jan

    + +

    v0.97.16 13 Jan

    -

    Changes history 2014

    v0.97.15 02 Mar