diff options
| author | Christian Grothoff <christian@grothoff.org> | 2024-06-23 09:44:25 +0200 |
|---|---|---|
| committer | Christian Grothoff <christian@grothoff.org> | 2024-06-23 09:44:25 +0200 |
| commit | 00058aa09499c40f2fb99580dd1fe82397da1c2c (patch) | |
| tree | 5cc7de604ed6aa817f7716557f38783969215b3c /src/util/payto.c | |
| parent | aac16cd06101417eeeae16088d240ae1f58f08c7 (diff) | |
| download | exchange-00058aa09499c40f2fb99580dd1fe82397da1c2c.tar.xz | |
allow host names with underscores, allow more characters from URLs (#8965)
Diffstat (limited to 'src/util/payto.c')
| -rw-r--r-- | src/util/payto.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/util/payto.c b/src/util/payto.c index 90a3f26ce..a471175a9 100644 --- a/src/util/payto.c +++ b/src/util/payto.c @@ -293,6 +293,7 @@ validate_payto_xtalerbank (const char *account_url) else { if (! ( ('-' == c) || + ('_' == c) || ( ('0' <= c) && ('9' >= c) ) || ( ('a' <= c) && ('z' >= c) ) || ( ('A' <= c) && ('Z' >= c) ) ) ) @@ -342,7 +343,7 @@ TALER_payto_validate (const char *payto_uri) /* This is more strict than RFC 8905, alas we do not need to support messages/instructions/etc., and it is generally better to start with a narrow whitelist; we can be more permissive later ...*/ #define ALLOWED_CHARACTERS \ - "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/:&?-_.,=+%~" + "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789/:$&?!-_.,;=*+%~@()[]" if (NULL == strchr (ALLOWED_CHARACTERS, (int) payto_uri[i])) { |