Index: net/ftp/ftp_network_transaction.cc |
diff --git a/net/ftp/ftp_network_transaction.cc b/net/ftp/ftp_network_transaction.cc |
index e1a4114caf6ac340966f4bc2605381e979460ee1..db84b51cd32275445d317718e0ff9a758525c220 100644 |
--- a/net/ftp/ftp_network_transaction.cc |
+++ b/net/ftp/ftp_network_transaction.cc |
@@ -7,6 +7,7 @@ |
#include "base/compiler_specific.h" |
#include "base/string_util.h" |
#include "net/base/connection_type_histograms.h" |
+#include "net/base/escape.h" |
#include "net/base/load_log.h" |
#include "net/base/net_errors.h" |
#include "net/base/net_util.h" |
@@ -28,10 +29,6 @@ namespace { |
// Returns true if |input| can be safely used as a part of FTP command. |
bool IsValidFTPCommandString(const std::string& input) { |
- // RFC 959 only allows ASCII strings. |
eroman
2009/09/18 22:51:23
Please add a comment in IsValidFTPComment() that w
|
- if (!IsStringASCII(input)) |
- return false; |
- |
// Protect agains newline injection attack. |
if (input.find_first_of("\r\n") != std::string::npos) |
return false; |
@@ -322,6 +319,15 @@ void FtpNetworkTransaction::OnIOComplete(int result) { |
DoCallback(rv); |
} |
+std::string FtpNetworkTransaction::GetRequestPathForFtpCommand() const { |
+ std::string path = (request_->url.has_path() ? request_->url.path() : "/"); |
+ UnescapeRule::Type unescape_rules = UnescapeRule::SPACES | |
+ UnescapeRule::URL_SPECIAL_CHARS; |
+ path = UnescapeURLComponent(path, unescape_rules); |
eroman
2009/09/18 22:51:23
Please add a comment that escaping to non-ASCII is
|
+ DCHECK(IsValidFTPCommandString(path)); |
+ return path; |
+} |
+ |
int FtpNetworkTransaction::DoLoop(int result) { |
DCHECK(next_state_ != STATE_NONE); |
@@ -788,11 +794,7 @@ int FtpNetworkTransaction::ProcessResponsePASV( |
// SIZE command |
int FtpNetworkTransaction::DoCtrlWriteSIZE() { |
- std::string command = "SIZE"; |
- if (request_->url.has_path()) { |
- command.append(" "); |
- command.append(request_->url.path()); |
- } |
+ std::string command = "SIZE " + GetRequestPathForFtpCommand(); |
next_state_ = STATE_CTRL_READ; |
return SendFtpCommand(command, COMMAND_SIZE); |
} |
@@ -826,13 +828,7 @@ int FtpNetworkTransaction::ProcessResponseSIZE( |
// RETR command |
int FtpNetworkTransaction::DoCtrlWriteRETR() { |
- std::string command = "RETR"; |
- if (request_->url.has_path()) { |
- command.append(" "); |
- command.append(request_->url.path()); |
- } else { |
- command.append(" /"); |
- } |
+ std::string command = "RETR " + GetRequestPathForFtpCommand(); |
next_state_ = STATE_CTRL_READ; |
return SendFtpCommand(command, COMMAND_RETR); |
} |
@@ -879,13 +875,7 @@ int FtpNetworkTransaction::ProcessResponseRETR( |
// MDMT command |
int FtpNetworkTransaction::DoCtrlWriteMDTM() { |
- std::string command = "MDTM"; |
- if (request_->url.has_path()) { |
- command.append(" "); |
- command.append(request_->url.path()); |
- } else { |
- command.append(" /"); |
- } |
+ std::string command = "MDTM " + GetRequestPathForFtpCommand(); |
next_state_ = STATE_CTRL_READ; |
return SendFtpCommand(command, COMMAND_MDTM); |
} |
@@ -915,13 +905,7 @@ int FtpNetworkTransaction::ProcessResponseMDTM( |
// CWD command |
int FtpNetworkTransaction::DoCtrlWriteCWD() { |
- std::string command = "CWD"; |
- if (request_->url.has_path()) { |
- command.append(" "); |
- command.append(request_->url.path()); |
- } else { |
- command.append(" /"); |
- } |
+ std::string command = "CWD " + GetRequestPathForFtpCommand(); |
next_state_ = STATE_CTRL_READ; |
return SendFtpCommand(command, COMMAND_CWD); |
} |