[Thaw-dev] r11213 - trunk/apps/Thaw/src/thaw/plugins/index

[jfle...@freenetproject.org]

Author: jflesch
Date: 2006-12-03 15:00:58 +0000 (Sun, 03 Dec 2006)
New Revision: 11213

Modified:
   trunk/apps/Thaw/src/thaw/plugins/index/IndexManagementHelper.java
Log:
Add a security when creating an index

Modified: trunk/apps/Thaw/src/thaw/plugins/index/IndexManagementHelper.java
===================================================================
--- trunk/apps/Thaw/src/thaw/plugins/index/IndexManagementHelper.java   
2006-12-03 14:43:45 UTC (rev 11212)
+++ trunk/apps/Thaw/src/thaw/plugins/index/IndexManagementHelper.java   
2006-12-03 15:00:58 UTC (rev 11213)
@@ -34,6 +34,7 @@
 import thaw.plugins.Hsqldb;

 import thaw.fcp.*;
+import thaw.core.Logger;

 /**
  * Index.java, IndexCategory.java and IndexTree.java must NEVER use this 
helper (to avoid loops).
@@ -134,6 +135,11 @@
                if (target == null)
                        target = tree.getRoot();

+               if (name == null || name.indexOf("/") >= 0) {
+                       Logger.error(new IndexManagementHelper(), "invalid 
name");
+                       return;
+               }
+
                Index index = new Index(db, queueManager, uIndexList, -1, 
target, name, name, null, null, 0, null);

                index.generateKeys();