glog/src
Philipp Wollermann 64827572c0
SendEmail: Protect users against vulnerable logmailers (#939)
glog is used on a variety of systems, and we must assume that some of
them still use vulnerable mailers that have bugs or "interesting
features" such as https://nvd.nist.gov/vuln/detail/CVE-2004-2771.

Let's protect users against accidental shell injection by validating
the email addresses against a slightly stricter version of the regex
used by HTML5 to validate addresses[1].

This should prevent triggering any unexpected behavior in these tools.

Also add some basic unit tests for the SendEmail method.

[1] https://html.spec.whatwg.org/multipage/input.html#valid-e-mail-address
2023-09-07 17:31:25 +02:00
..
base move to C++14 (#902) 2023-02-28 12:26:49 +01:00
glog SendEmail: Protect users against vulnerable logmailers (#939) 2023-09-07 17:31:25 +02:00
package_config_unittest/working_config cmake: require at least version 3.16 (fixes #705) 2021-12-09 19:01:27 +01:00
windows move to C++14 (#902) 2023-02-28 12:26:49 +01:00
cleanup_immediately_unittest.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
cleanup_with_absolute_prefix_unittest.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
cleanup_with_relative_prefix_unittest.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
config.h.cmake.in move to C++14 (#902) 2023-02-28 12:26:49 +01:00
demangle_unittest.cc Fix spelling mistakes 2023-05-25 20:51:51 +02:00
demangle_unittest.sh Add partial C++0x support and recognition of GCC function clone suffixes to 2011-02-07 14:43:05 +00:00
demangle_unittest.txt Add demangle support for ABI tags. (#416) 2019-01-07 15:30:23 +09:00
demangle.cc Fix spelling mistakes 2023-05-25 20:51:51 +02:00
demangle.h renamed GOOGLE_GLOG_DLL_DECL to GLOG_EXPORT 2022-02-14 10:32:44 +01:00
fuzz_demangle.cc Add fuzz testing for demangle (#878) 2023-02-24 22:45:32 +01:00
googletest.h SendEmail: Protect users against vulnerable logmailers (#939) 2023-09-07 17:31:25 +02:00
logging_striplog_test.sh Fix logging_striplog_test.sh in debug mode. Fixes issue 108. 2011-12-29 12:36:09 +00:00
logging_striptest2.cc Add license information for all source code. 2009-01-28 17:04:50 +00:00
logging_striptest10.cc Add license information for all source code. 2009-01-28 17:04:50 +00:00
logging_striptest_main.cc export OS_* defines (fixes #715) 2021-10-01 11:26:07 +02:00
logging_unittest.cc SendEmail: Protect users against vulnerable logmailers (#939) 2023-09-07 17:31:25 +02:00
logging_unittest.err restore the stream format after writing the log prefix (#731) 2021-11-05 22:29:36 +01:00
logging_unittest.out Add logtostdout and colorlogtostdout flags for logging to stdout 2022-02-19 16:13:59 +01:00
logging.cc SendEmail: Protect users against vulnerable logmailers (#939) 2023-09-07 17:31:25 +02:00
mock-log_unittest.cc simplify flags export 2022-02-13 13:04:24 +01:00
mock-log.h move to C++14 (#902) 2023-02-28 12:26:49 +01:00
raw_logging.cc fixed OpenBSD support (#921) 2023-05-10 13:41:38 +02:00
signalhandler_unittest.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
signalhandler_unittest.sh Fix Mac test failure 2013-02-01 05:46:37 +00:00
signalhandler.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
stacktrace_generic-inl.h move to C++14 (#902) 2023-02-28 12:26:49 +01:00
stacktrace_libunwind-inl.h run clang-tidy 2021-12-15 12:04:34 +01:00
stacktrace_powerpc-inl.h Fix spelling mistakes 2023-05-25 20:51:51 +02:00
stacktrace_unittest.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
stacktrace_unwind-inl.h move to C++14 (#902) 2023-02-28 12:26:49 +01:00
stacktrace_windows-inl.h move to C++14 (#902) 2023-02-28 12:26:49 +01:00
stacktrace_x86-inl.h move to C++14 (#902) 2023-02-28 12:26:49 +01:00
stacktrace.h move to C++14 (#902) 2023-02-28 12:26:49 +01:00
stl_logging_unittest.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
symbolize_unittest.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
symbolize.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00
symbolize.h move to C++14 (#902) 2023-02-28 12:26:49 +01:00
utilities_unittest.cc export OS_* defines (fixes #715) 2021-10-01 11:26:07 +02:00
utilities.cc fixed OpenBSD support (#921) 2023-05-10 13:41:38 +02:00
utilities.h Fix spelling mistakes 2023-05-25 20:51:51 +02:00
vlog_is_on.cc move to C++14 (#902) 2023-02-28 12:26:49 +01:00