Mercurial > hg > nginx
annotate src/http/modules/ngx_http_referer_module.c @ 3585:3031b5931864 stable-0.7
merge r3460:
allow HTTPS referers
| author | Igor Sysoev <igor@sysoev.ru> |
|---|---|
| date | Mon, 07 Jun 2010 10:15:21 +0000 |
| parents | 616ff375a68f |
| children |
| rev | line source |
|---|---|
| 577 | 1 |
| 2 /* | |
| 3 * Copyright (C) Igor Sysoev | |
| 4 */ | |
| 5 | |
| 6 | |
| 7 #include <ngx_config.h> | |
| 8 #include <ngx_core.h> | |
| 9 #include <ngx_http.h> | |
| 10 | |
| 11 | |
| 595 | 12 #define NGX_HTTP_REFERER_NO_URI_PART ((void *) 4) |
| 13 | |
| 1785 | 14 #if !(NGX_PCRE) |
| 1388 | 15 |
| 16 #define ngx_regex_t void | |
| 17 | |
| 18 #endif | |
| 19 | |
| 20 | |
| 577 | 21 typedef struct { |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
22 ngx_hash_combined_t hash; |
| 577 | 23 |
| 1388 | 24 #if (NGX_PCRE) |
| 25 ngx_array_t *regex; | |
| 26 #endif | |
| 27 | |
| 593 | 28 ngx_flag_t no_referer; |
| 29 ngx_flag_t blocked_referer; | |
| 577 | 30 |
| 593 | 31 ngx_hash_keys_arrays_t *keys; |
| 577 | 32 } ngx_http_referer_conf_t; |
| 33 | |
| 34 | |
| 35 static void * ngx_http_referer_create_conf(ngx_conf_t *cf); | |
| 36 static char * ngx_http_referer_merge_conf(ngx_conf_t *cf, void *parent, | |
| 37 void *child); | |
| 38 static char *ngx_http_valid_referers(ngx_conf_t *cf, ngx_command_t *cmd, | |
| 39 void *conf); | |
| 593 | 40 static char *ngx_http_add_referer(ngx_conf_t *cf, ngx_hash_keys_arrays_t *keys, |
| 595 | 41 ngx_str_t *value, ngx_str_t *uri); |
| 1388 | 42 static char *ngx_http_add_regex_referer(ngx_conf_t *cf, |
| 43 ngx_http_referer_conf_t *rlcf, ngx_str_t *name, ngx_regex_t *regex); | |
| 593 | 44 static int ngx_libc_cdecl ngx_http_cmp_referer_wildcards(const void *one, |
| 45 const void *two); | |
| 577 | 46 |
| 47 | |
| 48 static ngx_command_t ngx_http_referer_commands[] = { | |
| 49 | |
| 50 { ngx_string("valid_referers"), | |
| 51 NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_1MORE, | |
| 52 ngx_http_valid_referers, | |
| 53 NGX_HTTP_LOC_CONF_OFFSET, | |
| 54 0, | |
| 55 NULL }, | |
| 56 | |
| 57 ngx_null_command | |
| 58 }; | |
| 59 | |
| 60 | |
| 61 static ngx_http_module_t ngx_http_referer_module_ctx = { | |
| 62 NULL, /* preconfiguration */ | |
| 63 NULL, /* postconfiguration */ | |
| 64 | |
| 65 NULL, /* create main configuration */ | |
| 66 NULL, /* init main configuration */ | |
| 67 | |
| 68 NULL, /* create server configuration */ | |
| 69 NULL, /* merge server configuration */ | |
| 70 | |
| 71 ngx_http_referer_create_conf, /* create location configuration */ | |
| 72 ngx_http_referer_merge_conf /* merge location configuration */ | |
| 73 }; | |
| 74 | |
| 75 | |
| 76 ngx_module_t ngx_http_referer_module = { | |
| 77 NGX_MODULE_V1, | |
| 78 &ngx_http_referer_module_ctx, /* module context */ | |
| 79 ngx_http_referer_commands, /* module directives */ | |
| 80 NGX_HTTP_MODULE, /* module type */ | |
| 81 NULL, /* init master */ | |
| 82 NULL, /* init module */ | |
| 83 NULL, /* init process */ | |
| 84 NULL, /* init thread */ | |
| 85 NULL, /* exit thread */ | |
| 86 NULL, /* exit process */ | |
| 87 NULL, /* exit master */ | |
| 88 NGX_MODULE_V1_PADDING | |
| 89 }; | |
| 90 | |
| 91 | |
| 92 static ngx_int_t | |
| 93 ngx_http_referer_variable(ngx_http_request_t *r, ngx_http_variable_value_t *v, | |
| 94 uintptr_t data) | |
| 95 { | |
| 1388 | 96 u_char *p, *ref, *last; |
| 97 size_t len; | |
| 98 ngx_str_t *uri; | |
| 99 ngx_uint_t i, key; | |
| 100 ngx_http_referer_conf_t *rlcf; | |
| 101 u_char buf[256]; | |
| 577 | 102 |
| 593 | 103 rlcf = ngx_http_get_module_loc_conf(r, ngx_http_referer_module); |
| 577 | 104 |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
105 if (rlcf->hash.hash.buckets == NULL |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
106 && rlcf->hash.wc_head == NULL |
| 1388 | 107 && rlcf->hash.wc_tail == NULL |
| 108 #if (NGX_PCRE) | |
| 109 && rlcf->regex == NULL | |
| 110 #endif | |
| 111 ) | |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
112 { |
| 595 | 113 goto valid; |
| 577 | 114 } |
| 115 | |
| 116 if (r->headers_in.referer == NULL) { | |
| 593 | 117 if (rlcf->no_referer) { |
| 595 | 118 goto valid; |
| 119 } | |
| 577 | 120 |
| 595 | 121 goto invalid; |
| 577 | 122 } |
| 123 | |
| 124 len = r->headers_in.referer->value.len; | |
| 125 ref = r->headers_in.referer->value.data; | |
| 126 | |
| 3585 | 127 if (len >= sizeof("http://i.ru") - 1) { |
| 128 last = ref + len; | |
| 129 | |
| 130 if (ngx_strncasecmp(ref, (u_char *) "http://", 7) == 0) { | |
| 131 ref += 7; | |
| 132 goto valid_scheme; | |
| 133 | |
| 134 } else if (ngx_strncasecmp(ref, (u_char *) "https://", 8) == 0) { | |
| 135 ref += 8; | |
| 136 goto valid_scheme; | |
| 595 | 137 } |
| 577 | 138 } |
| 139 | |
| 3585 | 140 if (rlcf->blocked_referer) { |
| 141 goto valid; | |
| 142 } | |
| 143 | |
| 144 goto invalid; | |
| 145 | |
| 146 valid_scheme: | |
| 147 | |
| 595 | 148 i = 0; |
| 149 key = 0; | |
| 577 | 150 |
| 595 | 151 for (p = ref; p < last; p++) { |
| 593 | 152 if (*p == '/' || *p == ':') { |
| 153 break; | |
| 577 | 154 } |
| 595 | 155 |
| 156 buf[i] = ngx_tolower(*p); | |
| 157 key = ngx_hash(key, buf[i++]); | |
| 158 | |
| 159 if (i == 256) { | |
| 160 goto invalid; | |
| 161 } | |
| 593 | 162 } |
| 577 | 163 |
| 1388 | 164 uri = ngx_hash_find_combined(&rlcf->hash, key, buf, p - ref); |
| 577 | 165 |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
166 if (uri) { |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
167 goto uri; |
| 577 | 168 } |
| 169 | |
| 1388 | 170 #if (NGX_PCRE) |
| 171 | |
| 172 if (rlcf->regex) { | |
| 1785 | 173 ngx_int_t rc; |
| 174 ngx_str_t referer; | |
| 1388 | 175 |
| 176 referer.len = len - 7; | |
| 177 referer.data = ref; | |
| 178 | |
| 1785 | 179 rc = ngx_regex_exec_array(rlcf->regex, &referer, r->connection->log); |
| 1388 | 180 |
| 1785 | 181 if (rc == NGX_OK) { |
| 1388 | 182 goto valid; |
| 183 } | |
| 1785 | 184 |
| 185 if (rc == NGX_ERROR) { | |
| 186 return rc; | |
| 187 } | |
| 188 | |
| 189 /* NGX_DECLINED */ | |
| 1388 | 190 } |
| 191 | |
| 192 #endif | |
| 193 | |
| 595 | 194 invalid: |
| 195 | |
| 577 | 196 *v = ngx_http_variable_true_value; |
| 197 | |
| 198 return NGX_OK; | |
| 595 | 199 |
| 200 uri: | |
| 201 | |
| 202 for ( /* void */ ; p < last; p++) { | |
| 203 if (*p == '/') { | |
| 204 break; | |
| 205 } | |
| 206 } | |
| 207 | |
| 208 len = last - p; | |
| 209 | |
| 210 if (uri == NGX_HTTP_REFERER_NO_URI_PART) { | |
| 211 goto valid; | |
| 212 } | |
| 213 | |
| 214 if (len < uri->len || ngx_strncmp(uri->data, p, uri->len) != 0) { | |
| 215 goto invalid; | |
| 216 } | |
| 217 | |
| 218 valid: | |
| 219 | |
| 220 *v = ngx_http_variable_null_value; | |
| 221 | |
| 222 return NGX_OK; | |
| 577 | 223 } |
| 224 | |
| 225 | |
| 226 static void * | |
| 227 ngx_http_referer_create_conf(ngx_conf_t *cf) | |
| 228 { | |
| 229 ngx_http_referer_conf_t *conf; | |
| 230 | |
| 593 | 231 conf = ngx_pcalloc(cf->pool, sizeof(ngx_http_referer_conf_t)); |
| 577 | 232 if (conf == NULL) { |
|
3237
2efa8d2fcde1
merge r2903, r2911, r2912, r3002:
Igor Sysoev <igor@sysoev.ru>
parents:
1800
diff
changeset
|
233 return NULL; |
| 577 | 234 } |
| 235 | |
|
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
236 #if (NGX_PCRE) |
|
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
237 conf->regex = NGX_CONF_UNSET_PTR; |
|
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
238 #endif |
|
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
239 |
| 577 | 240 conf->no_referer = NGX_CONF_UNSET; |
| 241 conf->blocked_referer = NGX_CONF_UNSET; | |
| 242 | |
| 243 return conf; | |
| 244 } | |
| 245 | |
| 246 | |
| 247 static char * | |
| 248 ngx_http_referer_merge_conf(ngx_conf_t *cf, void *parent, void *child) | |
| 249 { | |
| 250 ngx_http_referer_conf_t *prev = parent; | |
| 251 ngx_http_referer_conf_t *conf = child; | |
| 252 | |
| 593 | 253 ngx_hash_init_t hash; |
| 254 | |
| 255 if (conf->keys == NULL) { | |
| 256 conf->hash = prev->hash; | |
| 257 | |
| 1800 | 258 #if (NGX_PCRE) |
|
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
259 ngx_conf_merge_ptr_value(conf->regex, prev->regex, NULL); |
| 1800 | 260 #endif |
| 577 | 261 ngx_conf_merge_value(conf->no_referer, prev->no_referer, 0); |
| 262 ngx_conf_merge_value(conf->blocked_referer, prev->blocked_referer, 0); | |
| 593 | 263 |
| 264 return NGX_CONF_OK; | |
| 265 } | |
| 266 | |
| 603 | 267 if ((conf->no_referer == 1 || conf->blocked_referer == 1) |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
268 && conf->keys->keys.nelts == 0 |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
269 && conf->keys->dns_wc_head.nelts == 0 |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
270 && conf->keys->dns_wc_tail.nelts == 0) |
| 603 | 271 { |
| 272 ngx_log_error(NGX_LOG_EMERG, cf->log, 0, | |
| 273 "the \"none\" or \"blocked\" referers are specified " | |
| 274 "in the \"valid_referers\" directive " | |
| 275 "without any valid referer"); | |
| 276 return NGX_CONF_ERROR; | |
| 277 } | |
| 278 | |
| 593 | 279 hash.key = ngx_hash_key_lc; |
| 280 hash.max_size = 2048; /* TODO: referer_hash_max_size; */ | |
| 281 hash.bucket_size = 64; /* TODO: referer_hash_bucket_size; */ | |
| 282 hash.name = "referers_hash"; | |
| 283 hash.pool = cf->pool; | |
| 284 | |
| 285 if (conf->keys->keys.nelts) { | |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
286 hash.hash = &conf->hash.hash; |
| 593 | 287 hash.temp_pool = NULL; |
| 288 | |
| 289 if (ngx_hash_init(&hash, conf->keys->keys.elts, conf->keys->keys.nelts) | |
| 290 != NGX_OK) | |
| 291 { | |
| 292 return NGX_CONF_ERROR; | |
| 293 } | |
| 294 } | |
| 295 | |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
296 if (conf->keys->dns_wc_head.nelts) { |
| 593 | 297 |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
298 ngx_qsort(conf->keys->dns_wc_head.elts, |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
299 (size_t) conf->keys->dns_wc_head.nelts, |
| 593 | 300 sizeof(ngx_hash_key_t), |
| 301 ngx_http_cmp_referer_wildcards); | |
| 302 | |
| 303 hash.hash = NULL; | |
| 304 hash.temp_pool = cf->temp_pool; | |
| 305 | |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
306 if (ngx_hash_wildcard_init(&hash, conf->keys->dns_wc_head.elts, |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
307 conf->keys->dns_wc_head.nelts) |
| 593 | 308 != NGX_OK) |
| 309 { | |
| 310 return NGX_CONF_ERROR; | |
| 311 } | |
| 312 | |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
313 conf->hash.wc_head = (ngx_hash_wildcard_t *) hash.hash; |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
314 } |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
315 |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
316 if (conf->keys->dns_wc_tail.nelts) { |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
317 |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
318 ngx_qsort(conf->keys->dns_wc_tail.elts, |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
319 (size_t) conf->keys->dns_wc_tail.nelts, |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
320 sizeof(ngx_hash_key_t), |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
321 ngx_http_cmp_referer_wildcards); |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
322 |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
323 hash.hash = NULL; |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
324 hash.temp_pool = cf->temp_pool; |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
325 |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
326 if (ngx_hash_wildcard_init(&hash, conf->keys->dns_wc_tail.elts, |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
327 conf->keys->dns_wc_tail.nelts) |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
328 != NGX_OK) |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
329 { |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
330 return NGX_CONF_ERROR; |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
331 } |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
332 |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
333 conf->hash.wc_tail = (ngx_hash_wildcard_t *) hash.hash; |
| 577 | 334 } |
| 335 | |
| 1800 | 336 #if (NGX_PCRE) |
|
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
337 ngx_conf_merge_ptr_value(conf->regex, prev->regex, NULL); |
| 1800 | 338 #endif |
|
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
339 |
| 577 | 340 if (conf->no_referer == NGX_CONF_UNSET) { |
| 341 conf->no_referer = 0; | |
| 342 } | |
| 343 | |
| 344 if (conf->blocked_referer == NGX_CONF_UNSET) { | |
| 345 conf->blocked_referer = 0; | |
| 346 } | |
| 347 | |
| 611 | 348 conf->keys = NULL; |
| 349 | |
| 577 | 350 return NGX_CONF_OK; |
| 351 } | |
| 352 | |
| 353 | |
| 354 static char * | |
| 355 ngx_http_valid_referers(ngx_conf_t *cf, ngx_command_t *cmd, void *conf) | |
| 356 { | |
| 593 | 357 ngx_http_referer_conf_t *rlcf = conf; |
| 577 | 358 |
| 593 | 359 u_char *p; |
| 595 | 360 ngx_str_t *value, uri, name; |
| 593 | 361 ngx_uint_t i, n; |
| 577 | 362 ngx_http_variable_t *var; |
| 363 ngx_http_server_name_t *sn; | |
| 364 ngx_http_core_srv_conf_t *cscf; | |
| 365 | |
| 366 name.len = sizeof("invalid_referer") - 1; | |
| 367 name.data = (u_char *) "invalid_referer"; | |
| 368 | |
| 583 | 369 var = ngx_http_add_variable(cf, &name, |
| 1565 | 370 NGX_HTTP_VAR_CHANGEABLE|NGX_HTTP_VAR_NOHASH); |
| 577 | 371 if (var == NULL) { |
| 372 return NGX_CONF_ERROR; | |
| 373 } | |
| 374 | |
| 637 | 375 var->get_handler = ngx_http_referer_variable; |
| 577 | 376 |
| 593 | 377 if (rlcf->keys == NULL) { |
| 378 rlcf->keys = ngx_pcalloc(cf->temp_pool, sizeof(ngx_hash_keys_arrays_t)); | |
| 379 if (rlcf->keys == NULL) { | |
| 380 return NGX_CONF_ERROR; | |
| 381 } | |
| 577 | 382 |
| 593 | 383 rlcf->keys->pool = cf->pool; |
| 384 rlcf->keys->temp_pool = cf->pool; | |
| 385 | |
| 386 if (ngx_hash_keys_array_init(rlcf->keys, NGX_HASH_SMALL) != NGX_OK) { | |
| 577 | 387 return NGX_CONF_ERROR; |
| 388 } | |
| 389 } | |
| 390 | |
| 391 value = cf->args->elts; | |
| 392 | |
| 393 for (i = 1; i < cf->args->nelts; i++) { | |
| 394 if (value[i].len == 0) { | |
| 395 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, | |
| 396 "invalid referer \"%V\"", &value[i]); | |
| 397 return NGX_CONF_ERROR; | |
| 398 } | |
| 399 | |
| 400 if (ngx_strcmp(value[i].data, "none") == 0) { | |
| 593 | 401 rlcf->no_referer = 1; |
| 577 | 402 continue; |
| 403 } | |
| 404 | |
| 405 if (ngx_strcmp(value[i].data, "blocked") == 0) { | |
| 593 | 406 rlcf->blocked_referer = 1; |
| 577 | 407 continue; |
| 408 } | |
| 409 | |
| 595 | 410 uri.len = 0; |
| 613 | 411 uri.data = NULL; |
| 595 | 412 |
| 577 | 413 if (ngx_strcmp(value[i].data, "server_names") == 0) { |
| 593 | 414 |
| 415 cscf = ngx_http_conf_get_module_srv_conf(cf, ngx_http_core_module); | |
| 577 | 416 |
| 593 | 417 sn = cscf->server_names.elts; |
| 418 for (n = 0; n < cscf->server_names.nelts; n++) { | |
| 1388 | 419 |
| 420 #if (NGX_PCRE) | |
| 421 if (sn[n].regex) { | |
| 422 | |
| 423 if (ngx_http_add_regex_referer(cf, rlcf, &sn[n].name, | |
| 424 sn[n].regex) | |
| 425 != NGX_OK) | |
| 426 { | |
| 427 return NGX_CONF_ERROR; | |
| 428 } | |
| 429 | |
| 430 continue; | |
| 431 } | |
| 432 #endif | |
| 433 | |
| 595 | 434 if (ngx_http_add_referer(cf, rlcf->keys, &sn[n].name, &uri) |
| 435 != NGX_OK) | |
| 436 { | |
| 593 | 437 return NGX_CONF_ERROR; |
| 438 } | |
| 439 } | |
| 577 | 440 |
| 441 continue; | |
| 442 } | |
| 443 | |
| 1388 | 444 if (value[i].data[0] == '~') { |
| 445 if (ngx_http_add_regex_referer(cf, rlcf, &value[i], NULL) != NGX_OK) | |
| 446 { | |
| 447 return NGX_CONF_ERROR; | |
| 448 } | |
| 449 | |
| 450 continue; | |
| 451 } | |
| 452 | |
| 1242 | 453 p = (u_char *) ngx_strchr(value[i].data, '/'); |
| 577 | 454 |
| 593 | 455 if (p) { |
| 595 | 456 uri.len = (value[i].data + value[i].len) - p; |
| 457 uri.data = p; | |
| 593 | 458 value[i].len = p - value[i].data; |
| 577 | 459 } |
| 460 | |
| 595 | 461 if (ngx_http_add_referer(cf, rlcf->keys, &value[i], &uri) != NGX_OK) { |
| 577 | 462 return NGX_CONF_ERROR; |
| 463 } | |
| 464 } | |
| 465 | |
| 466 return NGX_CONF_OK; | |
| 467 } | |
| 593 | 468 |
| 469 | |
| 470 static char * | |
| 471 ngx_http_add_referer(ngx_conf_t *cf, ngx_hash_keys_arrays_t *keys, | |
| 595 | 472 ngx_str_t *value, ngx_str_t *uri) |
| 593 | 473 { |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
474 ngx_int_t rc; |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
475 ngx_str_t *u; |
| 593 | 476 |
| 595 | 477 if (uri->len == 0) { |
| 478 u = NGX_HTTP_REFERER_NO_URI_PART; | |
| 479 | |
| 480 } else { | |
| 481 u = ngx_palloc(cf->pool, sizeof(ngx_str_t)); | |
| 482 if (u == NULL) { | |
| 483 return NGX_CONF_ERROR; | |
| 484 } | |
| 485 | |
| 486 *u = *uri; | |
| 487 } | |
| 488 | |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
489 rc = ngx_hash_add_key(keys, value, u, NGX_HASH_WILDCARD_KEY); |
| 593 | 490 |
| 491 if (rc == NGX_OK) { | |
| 492 return NGX_CONF_OK; | |
| 493 } | |
| 494 | |
|
1253
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
495 if (rc == NGX_DECLINED) { |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
496 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
497 "invalid hostname or wildcard \"%V\"", value); |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
498 } |
|
8ef04207c84f
the "www.example.*" wildcard hash support
Igor Sysoev <igor@sysoev.ru>
parents:
1242
diff
changeset
|
499 |
| 593 | 500 if (rc == NGX_BUSY) { |
| 501 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, | |
| 502 "conflicting parameter \"%V\"", value); | |
| 503 } | |
| 504 | |
| 505 return NGX_CONF_ERROR; | |
| 506 } | |
| 507 | |
| 508 | |
| 1388 | 509 static char * |
| 510 ngx_http_add_regex_referer(ngx_conf_t *cf, ngx_http_referer_conf_t *rlcf, | |
| 511 ngx_str_t *name, ngx_regex_t *regex) | |
| 512 { | |
| 513 #if (NGX_PCRE) | |
| 1785 | 514 ngx_str_t err; |
| 515 ngx_regex_elt_t *re; | |
| 516 u_char errstr[NGX_MAX_CONF_ERRSTR]; | |
| 1388 | 517 |
| 3335 | 518 if (name->len == 1) { |
| 519 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "empty regex in \"%V\"", name); | |
| 520 return NGX_CONF_ERROR; | |
| 521 } | |
| 522 | |
|
1782
db07cb9d1cbc
regex valid_referers were not inherited
Igor Sysoev <igor@sysoev.ru>
parents:
1704
diff
changeset
|
523 if (rlcf->regex == NGX_CONF_UNSET_PTR) { |
| 1785 | 524 rlcf->regex = ngx_array_create(cf->pool, 2, sizeof(ngx_regex_elt_t)); |
| 1388 | 525 if (rlcf->regex == NULL) { |
| 526 return NGX_CONF_ERROR; | |
| 527 } | |
| 528 } | |
| 529 | |
| 1785 | 530 re = ngx_array_push(rlcf->regex); |
| 531 if (re == NULL) { | |
| 1388 | 532 return NGX_CONF_ERROR; |
| 533 } | |
| 534 | |
| 535 if (regex) { | |
| 1785 | 536 re->regex = regex; |
| 537 re->name = name->data; | |
| 1388 | 538 |
| 539 return NGX_CONF_OK; | |
| 540 } | |
| 541 | |
| 542 err.len = NGX_MAX_CONF_ERRSTR; | |
| 543 err.data = errstr; | |
| 544 | |
| 545 name->len--; | |
| 546 name->data++; | |
| 547 | |
| 1785 | 548 re->regex = ngx_regex_compile(name, NGX_REGEX_CASELESS, cf->pool, &err); |
| 1388 | 549 |
| 1785 | 550 if (re->regex == NULL) { |
| 1388 | 551 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, "%s", err.data); |
| 552 return NGX_CONF_ERROR; | |
| 553 } | |
| 554 | |
| 1785 | 555 re->name = name->data; |
| 1388 | 556 |
| 557 return NGX_CONF_OK; | |
| 558 | |
| 559 #else | |
| 560 | |
| 561 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0, | |
| 562 "the using of the regex \"%V\" requires PCRE library", | |
| 563 name); | |
| 564 | |
| 565 return NGX_CONF_ERROR; | |
| 566 | |
| 567 #endif | |
| 568 } | |
| 569 | |
| 570 | |
| 593 | 571 static int ngx_libc_cdecl |
| 572 ngx_http_cmp_referer_wildcards(const void *one, const void *two) | |
| 573 { | |
| 574 ngx_hash_key_t *first, *second; | |
| 575 | |
| 576 first = (ngx_hash_key_t *) one; | |
| 577 second = (ngx_hash_key_t *) two; | |
| 578 | |
| 3335 | 579 return ngx_dns_strcmp(first->key.data, second->key.data); |
| 593 | 580 } |