ui-blob: Do not accept mimetype from user

[ps-cgit] / ui-blob.c

diff --git a/ui-blob.c b/ui-blob.c
index d3c3a102669fe9a56dba80d4c511f39ab8300189..2cce11cb976d7bc49f3ec5c776f57043cab76647 100644 (file)
--- a/ui-blob.c
+++ b/ui-blob.c
@@ -99,6 +99,7 @@ int cgit_print_file(char *path, const char *head, int file_only)
                return -1;
        buf[size] = '\0';
        html_raw(buf, size);
                return -1;
        buf[size] = '\0';
        html_raw(buf, size);

+       free(buf);

        return 0;
 }
 
        return 0;
 }
 


@@ -160,7 +161,6 @@ void cgit_print_blob(const char *hex, char *path, const char *head, int file_onl
        }
 
        buf[size] = '\0';
        }
 
        buf[size] = '\0';

-       ctx.page.mimetype = ctx.qry.mimetype;

        if (!ctx.page.mimetype) {
                if (buffer_is_binary(buf, size))
                        ctx.page.mimetype = "application/octet-stream";
        if (!ctx.page.mimetype) {
                if (buffer_is_binary(buf, size))
                        ctx.page.mimetype = "application/octet-stream";


@@ -170,4 +170,5 @@ void cgit_print_blob(const char *hex, char *path, const char *head, int file_onl
        ctx.page.filename = path;
        cgit_print_http_headers();
        html_raw(buf, size);
        ctx.page.filename = path;
        cgit_print_http_headers();
        html_raw(buf, size);

+       free(buf);

 }
 }