23 lines
651 B
Diff
23 lines
651 B
Diff
|
diff --git a/src/url.c b/src/url.c
|
||
|
index 8f8ff0b..7d36b27 100644
|
||
|
--- a/src/url.c
|
||
|
+++ b/src/url.c
|
||
|
@@ -925,6 +925,17 @@ url_parse (const char *url, int *error, struct iri *iri, bool percent_encode)
|
||
|
url_unescape (u->host);
|
||
|
host_modified = true;
|
||
|
|
||
|
+ /* check for invalid control characters in host name */
|
||
|
+ for (p = u->host; *p; p++)
|
||
|
+ {
|
||
|
+ if (c_iscntrl(*p))
|
||
|
+ {
|
||
|
+ url_free(u);
|
||
|
+ error_code = PE_INVALID_HOST_NAME;
|
||
|
+ goto error;
|
||
|
+ }
|
||
|
+ }
|
||
|
+
|
||
|
/* Apply IDNA regardless of iri->utf8_encode status */
|
||
|
if (opt.enable_iri && iri)
|
||
|
{
|