apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-12 19:55:14 +02:00
Code Issues Projects Releases Packages Wiki Activity

new capacity bits (#67)

Browse source
This commit is contained in:
Eli Peter 2026-05-07 01:29:31 -04:00 • committed by GitHub
parent afaffc0df6
commit 7d0e7320e2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
261 changed files with 10591 additions and 231 deletions
Download patch file Download diff file Expand all files Collapse all files

13
tests/fixtures/xpath_injection/cpp/safe_xpath_query.cpp vendored Normal file
View file

@ -0,0 +1,13 @@
// Safe: project-local sanitize_xpath (matches the developer-named
// `sanitize_*` Sanitizer rule) clears caps on the user value before it
// reaches xmlXPathEvalExpression.
#include <libxml/xpath.h>
#include <cstdlib>
extern "C" char *sanitize_xpath(const char *raw);
xmlXPathObjectPtr do_lookup(xmlXPathContextPtr ctx) {
char *user_expr = std::getenv("USER_EXPR");
char *safe = sanitize_xpath(user_expr);
return xmlXPathEvalExpression((xmlChar *)safe, ctx);
}