|
php.net | support | documentation | report a bug | advanced search | search howto | statistics | random bug | login |
Patchesmultipart_post_test.php (last revision 2012-08-05 16:56 UTC by admin at angosso dot net)Pull RequestsHistoryAllCommentsChangesGit/SVN commits
[2012-08-06 01:13 UTC] aharvey@php.net
[2012-08-06 01:13 UTC] aharvey@php.net
-Status: Open
+Status: Not a bug
|
|||||||||||||||||||||||||||||||||
Copyright © 2001-2025 The PHP GroupAll rights reserved. |
Last updated: Thu Dec 04 12:00:02 2025 UTC |
Description: ------------ User Agent: Mozilla/5.0 (Windows NT 6.0; rv:14.0) Gecko/20100101 Firefox/14.0.1 Build ID: 20120713134347 Steps to reproduce: user_pref("capability.policy.policynames", "strict"); user_pref("capability.policy.strict.sites", "http://www.hosting24.com http://www.srv47.hosting24.com"); user_pref("capability.policy.strict.Window.alert", "noAccess"); user_pref("capability.policy.strict.Window.confirm", "noAccess"); user_pref("capability.policy.strict.Window.prompt", "noAccess"); Test script: --------------- "v=spf1 +a +mx +ip4:212.1.208.183 +a:srv47.hosting24.com +mx:mail.angosso.net +mx:srv47.hosting24.com +include:angosso.net ?all" Expected result: ---------------- function _parse_uri() function _redirect( $uri ) { $location = $this->_parse_location( $uri ); if ( $location['host'] != $this->host || $location['port'] != $this->port ) { $this->host = $location['host']; $this->port = $location['port']; if ( !$this->_use_proxy) $this->disconnect(); } usleep( 100 ); $this->get( $location['request_file'] . '?' . $location['query_string'] ); foreach( $this->cookies as $cookie_name => $cookie_data ) { if ($cookie_data['expires'] > $none) { $new_cookies[$cookie_name] = $cookie_data; $domain = preg_quote( $cookie_data['angosso.net'] ); $path = preg_quote( $cookie_data['/home/angosson/public_html/www'] ); if ( preg_match( "'.*$domain$'i", $current_domain ) && preg_match( "'^$path.*'i", $current_path ) ) $cookie_str .= $cookie_name . '=' . $cookie_data['http://www.angosso.net/pub-page/economie.php'] . '; '; } } Actual result: -------------- Vulnerability