Chromium Code Reviews| Index: net/ftp/ftp_network_transaction.cc | 
| diff --git a/net/ftp/ftp_network_transaction.cc b/net/ftp/ftp_network_transaction.cc | 
| index e1a4114caf6ac340966f4bc2605381e979460ee1..db84b51cd32275445d317718e0ff9a758525c220 100644 | 
| --- a/net/ftp/ftp_network_transaction.cc | 
| +++ b/net/ftp/ftp_network_transaction.cc | 
| @@ -7,6 +7,7 @@ | 
| #include "base/compiler_specific.h" | 
| #include "base/string_util.h" | 
| #include "net/base/connection_type_histograms.h" | 
| +#include "net/base/escape.h" | 
| #include "net/base/load_log.h" | 
| #include "net/base/net_errors.h" | 
| #include "net/base/net_util.h" | 
| @@ -28,10 +29,6 @@ namespace { | 
| // Returns true if |input| can be safely used as a part of FTP command. | 
| bool IsValidFTPCommandString(const std::string& input) { | 
| - // RFC 959 only allows ASCII strings. | 
| 
 
eroman
2009/09/18 22:51:23
Please add a comment in IsValidFTPComment() that w
 
 | 
| - if (!IsStringASCII(input)) | 
| - return false; | 
| - | 
| // Protect agains newline injection attack. | 
| if (input.find_first_of("\r\n") != std::string::npos) | 
| return false; | 
| @@ -322,6 +319,15 @@ void FtpNetworkTransaction::OnIOComplete(int result) { | 
| DoCallback(rv); | 
| } | 
| +std::string FtpNetworkTransaction::GetRequestPathForFtpCommand() const { | 
| + std::string path = (request_->url.has_path() ? request_->url.path() : "/"); | 
| + UnescapeRule::Type unescape_rules = UnescapeRule::SPACES | | 
| + UnescapeRule::URL_SPECIAL_CHARS; | 
| + path = UnescapeURLComponent(path, unescape_rules); | 
| 
 
eroman
2009/09/18 22:51:23
Please add a comment that escaping to non-ASCII is
 
 | 
| + DCHECK(IsValidFTPCommandString(path)); | 
| + return path; | 
| +} | 
| + | 
| int FtpNetworkTransaction::DoLoop(int result) { | 
| DCHECK(next_state_ != STATE_NONE); | 
| @@ -788,11 +794,7 @@ int FtpNetworkTransaction::ProcessResponsePASV( | 
| // SIZE command | 
| int FtpNetworkTransaction::DoCtrlWriteSIZE() { | 
| - std::string command = "SIZE"; | 
| - if (request_->url.has_path()) { | 
| - command.append(" "); | 
| - command.append(request_->url.path()); | 
| - } | 
| + std::string command = "SIZE " + GetRequestPathForFtpCommand(); | 
| next_state_ = STATE_CTRL_READ; | 
| return SendFtpCommand(command, COMMAND_SIZE); | 
| } | 
| @@ -826,13 +828,7 @@ int FtpNetworkTransaction::ProcessResponseSIZE( | 
| // RETR command | 
| int FtpNetworkTransaction::DoCtrlWriteRETR() { | 
| - std::string command = "RETR"; | 
| - if (request_->url.has_path()) { | 
| - command.append(" "); | 
| - command.append(request_->url.path()); | 
| - } else { | 
| - command.append(" /"); | 
| - } | 
| + std::string command = "RETR " + GetRequestPathForFtpCommand(); | 
| next_state_ = STATE_CTRL_READ; | 
| return SendFtpCommand(command, COMMAND_RETR); | 
| } | 
| @@ -879,13 +875,7 @@ int FtpNetworkTransaction::ProcessResponseRETR( | 
| // MDMT command | 
| int FtpNetworkTransaction::DoCtrlWriteMDTM() { | 
| - std::string command = "MDTM"; | 
| - if (request_->url.has_path()) { | 
| - command.append(" "); | 
| - command.append(request_->url.path()); | 
| - } else { | 
| - command.append(" /"); | 
| - } | 
| + std::string command = "MDTM " + GetRequestPathForFtpCommand(); | 
| next_state_ = STATE_CTRL_READ; | 
| return SendFtpCommand(command, COMMAND_MDTM); | 
| } | 
| @@ -915,13 +905,7 @@ int FtpNetworkTransaction::ProcessResponseMDTM( | 
| // CWD command | 
| int FtpNetworkTransaction::DoCtrlWriteCWD() { | 
| - std::string command = "CWD"; | 
| - if (request_->url.has_path()) { | 
| - command.append(" "); | 
| - command.append(request_->url.path()); | 
| - } else { | 
| - command.append(" /"); | 
| - } | 
| + std::string command = "CWD " + GetRequestPathForFtpCommand(); | 
| next_state_ = STATE_CTRL_READ; | 
| return SendFtpCommand(command, COMMAND_CWD); | 
| } |