From 7adefddb665af33d4718f429793e27a49a8d61b7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B8rn=20Lode?= Date: Sun, 30 Apr 2017 23:53:56 +0200 Subject: [PATCH] url_regex: Don't allow : or / in passwords --- url_regex.hh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/url_regex.hh b/url_regex.hh index eec1629..3c7e7c4 100644 --- a/url_regex.hh +++ b/url_regex.hh @@ -3,7 +3,7 @@ #define USERCHARS "-[:alnum:]" #define USERCHARS_CLASS "[" USERCHARS "]" -#define PASSCHARS_CLASS "[-[:alnum:]\\Q,?;.:/!%$^*&~\"#'\\E]" +#define PASSCHARS_CLASS "[-[:alnum:]\\Q,?;.!%$^*&~\"#'\\E]" #define HOSTCHARS_CLASS "[-[:alnum:]]" #define HOST "(?:" HOSTCHARS_CLASS "+(\\." HOSTCHARS_CLASS "+)*)?" #define PORT "(?:\\:[[:digit:]]{1,5})?"