diff options
| author | Mårten Nordheim <marten.nordheim@qt.io> | 2020-08-19 12:47:47 +0200 |
|---|---|---|
| committer | Mårten Nordheim <marten.nordheim@qt.io> | 2020-09-22 19:08:53 +0200 |
| commit | a07f35409bc1e129b027fc7ccb312949a454f66e (patch) | |
| tree | 84cde42e8d76a0eb0abbaddf474975eb8393a57f /src/network/access/qhttpnetworkrequest.cpp | |
| parent | 16a1ddd73337c2622499c77b12de9395d43aba87 (diff) | |
QDecompressHelper: limit decompression ratio
To avoid potential decompression bombs. This is implemented with just
a simple check that the ratio doesn't pass some hardcoded preset.
Change-Id: I17246f0f43e73280cdb35a8f03d65885f5678ad6
Reviewed-by: Thiago Macieira <thiago.macieira@intel.com>
Diffstat (limited to 'src/network/access/qhttpnetworkrequest.cpp')
| -rw-r--r-- | src/network/access/qhttpnetworkrequest.cpp | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/src/network/access/qhttpnetworkrequest.cpp b/src/network/access/qhttpnetworkrequest.cpp index 7ef033047e..c0b2167d15 100644 --- a/src/network/access/qhttpnetworkrequest.cpp +++ b/src/network/access/qhttpnetworkrequest.cpp @@ -64,6 +64,7 @@ QHttpNetworkRequestPrivate::QHttpNetworkRequestPrivate(const QHttpNetworkRequest withCredentials(other.withCredentials), ssl(other.ssl), preConnect(other.preConnect), + ignoreDecompressionRatio(other.ignoreDecompressionRatio), redirectCount(other.redirectCount), redirectPolicy(other.redirectPolicy), peerVerifyName(other.peerVerifyName) @@ -402,5 +403,15 @@ void QHttpNetworkRequest::setPeerVerifyName(const QString &peerName) d->peerVerifyName = peerName; } +bool QHttpNetworkRequest::ignoreDecompressionRatio() +{ + return d->ignoreDecompressionRatio; +} + +void QHttpNetworkRequest::setIgnoreDecompressionRatio(bool enabled) +{ + d->ignoreDecompressionRatio = enabled; +} + QT_END_NAMESPACE |