mirror of
https://github.com/owasp-modsecurity/ModSecurity.git
synced 2025-08-17 06:36:13 +03:00
In C++11, string data is always null-terminated[1], and can be freely modified[2]. [1] https://stackoverflow.com/questions/6077189/will-stdstring-always-be-null-terminated-in-c11 [2] https://stackoverflow.com/questions/38875623/is-it-permitted-to-modify-the-internal-stdstring-buffer-returned-by-operator
64 lines
1.6 KiB
C++
64 lines
1.6 KiB
C++
/*
|
|
* ModSecurity, http://www.modsecurity.org/
|
|
* Copyright (c) 2015 - 2020 Trustwave Holdings, Inc. (http://www.trustwave.com/)
|
|
*
|
|
* You may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* If any of the files related to licensing are missing or if you have any
|
|
* other questions related to licensing please contact Trustwave Holdings, Inc.
|
|
* directly using the email address security@modsecurity.org.
|
|
*
|
|
*/
|
|
|
|
|
|
#include <string>
|
|
|
|
#include "modsecurity/modsecurity.h"
|
|
#include "modsecurity/actions/action.h"
|
|
|
|
#include "src/actions/transformations/transformation.h"
|
|
|
|
|
|
#ifndef SRC_ACTIONS_TRANSFORMATIONS_UTF8_TO_UNICODE_H_
|
|
#define SRC_ACTIONS_TRANSFORMATIONS_UTF8_TO_UNICODE_H_
|
|
|
|
|
|
namespace modsecurity {
|
|
namespace actions {
|
|
namespace transformations {
|
|
|
|
|
|
class Utf8ToUnicode : public Transformation {
|
|
public:
|
|
Utf8ToUnicode()
|
|
: Action("t:utf8toUnicode")
|
|
{ }
|
|
|
|
void execute(const Transaction *t,
|
|
const ModSecString &in,
|
|
ModSecString &out) noexcept override;
|
|
|
|
private:
|
|
enum UnicodeError {
|
|
UNICODE_ERROR_CHARACTERS_MISSING = -1,
|
|
UNICODE_ERROR_INVALID_ENCODING = -2,
|
|
UNICODE_ERROR_OVERLONG_CHARACTER = -3,
|
|
UNICODE_ERROR_RESTRICTED_CHARACTER = -4,
|
|
UNICODE_ERROR_DECODING_ERROR = -5
|
|
};
|
|
|
|
static char *inplace(const unsigned char *input, uint64_t input_len,
|
|
int *changed);
|
|
};
|
|
|
|
|
|
} // namespace transformations
|
|
} // namespace actions
|
|
} // namespace modsecurity
|
|
|
|
|
|
#endif // SRC_ACTIONS_TRANSFORMATIONS_UTF8_TO_UNICODE_H_
|