util_uri_is_evil

The util_uri_is_evil function checks a specified URI for insecure path characters. Insecure path characters include //, /./, /../ and/., /.. (and for Windows./) at the end of the URI. Use this function to see whether a URI requested by the client is insecure.

Syntax

int util_uri_is_evil(char *t);

Returns

1 if the URI is insecure, or 0 if the URI is OK.

Parameters

char *t is the URI to be checked.

See Also

util_uri_escape, util_uri_parse