From 5c1864ed5e0cfa62fcaa3cdc6a596b0311e52a2a Mon Sep 17 00:00:00 2001 From: zzz Date: Mon, 5 Jan 2009 15:06:29 +0000 Subject: [PATCH] addressbook: Prevent Base32 hostnames --- apps/addressbook/java/src/addressbook/AddressBook.java | 2 ++ 1 file changed, 2 insertions(+) diff --git a/apps/addressbook/java/src/addressbook/AddressBook.java b/apps/addressbook/java/src/addressbook/AddressBook.java index ca1e1916e..d8632bdee 100644 --- a/apps/addressbook/java/src/addressbook/AddressBook.java +++ b/apps/addressbook/java/src/addressbook/AddressBook.java @@ -179,6 +179,8 @@ public class AddressBook { // IDN - basic check, not complete validation (host.indexOf("--") < 0 || host.startsWith("xn--") || host.indexOf(".xn--") > 0) && host.replaceAll("[a-z0-9.-]", "").length() == 0 && + // Base32 spoofing (52chars.i2p) + (! (host.length() == 56 && host.substring(0,52).replaceAll("[a-z2-7]", "").length() == 0)) && // some reserved names that may be used for local configuration someday (! host.equals("proxy.i2p")) && (! host.equals("router.i2p")) &&