reduced string for lol bomb filtering, to filter out <\?xml* instead of <\?xml\ *

git-svn-id: http://svn.code.sf.net/p/retroshare/code/trunk@6916 b45a01b8-16f6-495d-af2f-9b41ad6348cc
This commit is contained in:
csoler 2013-11-28 21:11:53 +00:00
parent f7a36d65a9
commit a1ab524bdf

View File

@ -566,10 +566,10 @@ bool GetTlvWideString(void *data, uint32_t size, uint32_t *offset,
static const int number_of_suspiscious_strings = 4 ; static const int number_of_suspiscious_strings = 4 ;
static const std::wstring err_in = L"**** String removed (SVG bomb?) ****" ; static const std::wstring err_in = L"**** String removed (SVG bomb?) ****" ;
static std::wstring suspiscious_strings[number_of_suspiscious_strings] = { L"<!e", // base ingredient of xml bombs static std::wstring suspiscious_strings[number_of_suspiscious_strings] = { L"<!e", // base ingredient of xml bombs
L"<!E", L"<!E",
L"PD94bWwg", // this is the base64 encoding of <?xml L"PD94bW", // this is the base64 encoding of <?xml*
L"PHN2Zy" // this is the base64 encoding of <svg L"PHN2Zy" // this is the base64 encoding of <svg*
} ; } ;
#ifdef TLV_BASE_DEBUG #ifdef TLV_BASE_DEBUG