Upstream/dynmap
1
0
Fork 0
mirror of https://github.com/webbukkit/dynmap.git synced 2024-11-28 13:15:30 +01:00
Code Issues Projects Releases Wiki Activity

Revert "Disallow .. in file path. Also logging, imports"

Browse Source 
This reverts commit 1bc275ea46.
This commit is contained in:
FrozenCow 2011-06-27 21:26:52 +02:00
parent 1bc275ea46
commit 47620fe79e
3 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/main/java/org/dynmap/regions/RegionHandler.java
View File

@ -1,24 +1,24 @@
package org.dynmap.regions; package org.dynmap.regions;
import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.File; import java.io.File;
import java.util.List;
import java.io.FileNotFoundException; import java.io.FileNotFoundException;
import java.io.IOException; import java.io.IOException;
import java.io.InputStream; import java.io.InputStream;
import java.util.Collection; import java.util.Collection;
import java.util.HashSet;
import java.util.List;
import java.util.Map; import java.util.Map;
import java.util.HashSet;
import java.util.logging.Level;
import org.bukkit.util.config.Configuration; import org.bukkit.util.config.Configuration;
import org.dynmap.ConfigurationNode; import org.dynmap.ConfigurationNode;
import org.dynmap.Log;
import org.dynmap.web.HttpRequest; import org.dynmap.web.HttpRequest;
import org.dynmap.web.HttpResponse; import org.dynmap.web.HttpResponse;
import org.dynmap.web.Json; import org.dynmap.web.Json;
import org.dynmap.web.handlers.FileHandler; import org.dynmap.web.handlers.FileHandler;
import java.io.ByteArrayOutputStream;
import java.io.ByteArrayInputStream;
public class RegionHandler extends FileHandler { public class RegionHandler extends FileHandler {
private ConfigurationNode regions; private ConfigurationNode regions;
public RegionHandler(ConfigurationNode regions) { public RegionHandler(ConfigurationNode regions) {
@ -81,9 +81,9 @@ public class RegionHandler extends FileHandler {
fos.close(); fos.close();
return new ByteArrayInputStream(fos.toByteArray()); return new ByteArrayInputStream(fos.toByteArray());
} catch (FileNotFoundException ex) { } catch (FileNotFoundException ex) {
Log.severe("Exception while writing JSON-file.", ex); log.log(Level.SEVERE, "Exception while writing JSON-file.", ex);
} catch (IOException ioe) { } catch (IOException ioe) {
Log.severe("Exception while writing JSON-file.", ioe); log.log(Level.SEVERE, "Exception while writing JSON-file.", ioe);
} }
return null; return null;
} }

5
src/main/java/org/dynmap/web/handlers/FileHandler.java
View File

@ -6,6 +6,7 @@ import java.io.OutputStream;
import java.util.HashMap; import java.util.HashMap;
import java.util.LinkedList; import java.util.LinkedList;
import java.util.Map; import java.util.Map;
import java.util.logging.Logger;
import org.dynmap.web.HttpField; import org.dynmap.web.HttpField;
import org.dynmap.web.HttpHandler; import org.dynmap.web.HttpHandler;
@ -14,6 +15,8 @@ import org.dynmap.web.HttpResponse;
import org.dynmap.web.HttpStatus; import org.dynmap.web.HttpStatus;
public abstract class FileHandler implements HttpHandler { public abstract class FileHandler implements HttpHandler {
protected static final Logger log = Logger.getLogger("Minecraft");
protected static final String LOG_PREFIX = "[dynmap] ";
//BUG-this breaks re-entrancy of this handler, which is called from multiple threads (one per request) //BUG-this breaks re-entrancy of this handler, which is called from multiple threads (one per request)
//private byte[] readBuffer = new byte[40960]; //private byte[] readBuffer = new byte[40960];
//Replace with pool of buffers //Replace with pool of buffers
@ -56,7 +59,7 @@ public abstract class FileHandler implements HttpHandler {
if (qmark >= 0) if (qmark >= 0)
path = path.substring(0, qmark); path = path.substring(0, qmark);
if (path.startsWith("/") || path.startsWith(".") || path.contains("..")) if (path.startsWith("/") || path.startsWith("."))
return null; return null;
if (path.length() == 0) if (path.length() == 0)
path = getDefaultFilename(path); path = getDefaultFilename(path);

3
src/main/java/org/dynmap/web/handlers/FilesystemHandler.java
View File

@ -21,9 +21,6 @@ public class FilesystemHandler extends FileHandler {
} }
@Override @Override
protected InputStream getFileInput(String path, HttpRequest request, HttpResponse response) { protected InputStream getFileInput(String path, HttpRequest request, HttpResponse response) {
if(path == null)
return null;
File file = new File(root, path); File file = new File(root, path);
FileLockManager.getReadLock(file); FileLockManager.getReadLock(file);
if (file.getAbsolutePath().startsWith(root.getAbsolutePath()) && file.isFile()) { if (file.getAbsolutePath().startsWith(root.getAbsolutePath()) && file.isFile()) {