mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-12-04 05:22:17 +00:00
65 lines
2.0 KiB
C++
65 lines
2.0 KiB
C++
#include <Common/HTTPHeaderFilter.h>
|
|
#include <Common/StringUtils/StringUtils.h>
|
|
#include <Common/Exception.h>
|
|
|
|
#ifdef __clang__
|
|
# pragma clang diagnostic push
|
|
# pragma clang diagnostic ignored "-Wzero-as-null-pointer-constant"
|
|
#endif
|
|
#include <re2/re2.h>
|
|
#ifdef __clang__
|
|
# pragma clang diagnostic pop
|
|
#endif
|
|
|
|
namespace DB
|
|
{
|
|
|
|
namespace ErrorCodes
|
|
{
|
|
extern const int BAD_ARGUMENTS;
|
|
}
|
|
|
|
void HTTPHeaderFilter::checkHeaders(const HTTPHeaderEntries & entries) const
|
|
{
|
|
std::lock_guard guard(mutex);
|
|
|
|
for (const auto & entry : entries)
|
|
{
|
|
if (entry.name.contains('\n') || entry.value.contains('\n'))
|
|
throw Exception(ErrorCodes::BAD_ARGUMENTS, "HTTP header \"{}\" has invalid character", entry.name);
|
|
|
|
if (forbidden_headers.contains(entry.name))
|
|
throw Exception(ErrorCodes::BAD_ARGUMENTS, "HTTP header \"{}\" is forbidden in configuration file, "
|
|
"see <http_forbid_headers>", entry.name);
|
|
|
|
for (const auto & header_regex : forbidden_headers_regexp)
|
|
if (re2::RE2::FullMatch(entry.name, header_regex))
|
|
throw Exception(ErrorCodes::BAD_ARGUMENTS, "HTTP header \"{}\" is forbidden in configuration file, "
|
|
"see <http_forbid_headers>", entry.name);
|
|
}
|
|
}
|
|
|
|
void HTTPHeaderFilter::setValuesFromConfig(const Poco::Util::AbstractConfiguration & config)
|
|
{
|
|
std::lock_guard guard(mutex);
|
|
|
|
forbidden_headers.clear();
|
|
forbidden_headers_regexp.clear();
|
|
|
|
if (config.has("http_forbid_headers"))
|
|
{
|
|
std::vector<std::string> keys;
|
|
config.keys("http_forbid_headers", keys);
|
|
|
|
for (const auto & key : keys)
|
|
{
|
|
if (startsWith(key, "header_regexp"))
|
|
forbidden_headers_regexp.push_back(config.getString("http_forbid_headers." + key));
|
|
else if (startsWith(key, "header"))
|
|
forbidden_headers.insert(config.getString("http_forbid_headers." + key));
|
|
}
|
|
}
|
|
}
|
|
|
|
}
|