Revision control
Copy as Markdown
// Copyright (C) 2016 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
// Qt-Security score:critical reason:data-parser
#include "qnetworkproxy.h"
#include <QtCore/QByteArray>
#include <QtCore/QUrl>
#ifndef QT_NO_NETWORKPROXY
/*
* Construct a proxy from the environment variables http_proxy and no_proxy.
* Or no system proxy. Just return a list with NoProxy.
*/
QT_BEGIN_NAMESPACE
using namespace Qt::StringLiterals;
static bool ignoreProxyFor(const QNetworkProxyQuery &query)
{
const QByteArray noProxy = qgetenv("no_proxy").trimmed();
if (noProxy.isEmpty())
return false;
const QString host = query.peerHostName();
const QList<QByteArray> noProxyTokens = noProxy.split(',');
for (const QByteArray &rawToken : noProxyTokens) {
QString token = QString::fromUtf8(rawToken).trimmed();
// A lone "*" bypasses every host, which suffix matching cannot express.
if (token == "*"_L1)
return true;
// A leading "*" is redundant once the rest is matched as a suffix.
if (token.startsWith(u'*'))
token = token.mid(1);
// Harmonize trailing dot notation
if (token.endsWith(u'.') && !host.endsWith(u'.'))
token = token.chopped(1);
if (token.startsWith(u'.')) // leading dot is implied
token = token.mid(1);
// QUrl hands back a canonical host, so put the entry in that form.
if (const QByteArray ace = QUrl::toAce(token); !ace.isEmpty())
token = QUrl::fromAce(ace);
if (host.endsWith(token)) {
// Make sure that when we have a suffix match,
// we don't match "donotmatch.com" with "match.com"
if (host.size() == token.size()) // iow: host == token
return true;
if (host[host.size() - token.size() - 1] == u'.') // match follows a dot
return true;
}
}
return false;
}
QList<QNetworkProxy> QNetworkProxyFactory::systemProxyForQuery(const QNetworkProxyQuery &query)
{
QList<QNetworkProxy> proxyList;
if (ignoreProxyFor(query))
return proxyList << QNetworkProxy::NoProxy;
// No need to care about casing here, QUrl lowercases values already
const QString queryProtocol = query.protocolTag();
QByteArray proxy_env;
if (queryProtocol == "http"_L1)
proxy_env = qgetenv("http_proxy");
else if (queryProtocol == "https"_L1)
proxy_env = qgetenv("https_proxy");
else if (queryProtocol == "ftp"_L1)
proxy_env = qgetenv("ftp_proxy");
else
proxy_env = qgetenv("all_proxy");
// Fallback to http_proxy is no protocol specific proxy was found
if (proxy_env.isEmpty())
proxy_env = qgetenv("http_proxy");
if (!proxy_env.isEmpty()) {
QUrl url = QUrl(QString::fromLocal8Bit(proxy_env));
const QString scheme = url.scheme();
if (scheme == "socks5"_L1 || scheme == "socks5h"_L1) {
QNetworkProxy proxy(QNetworkProxy::Socks5Proxy, url.host(),
url.port() ? url.port() : 1080, url.userName(), url.password());
proxyList << proxy;
} else if ((scheme.isEmpty() || scheme == "http"_L1)
&& query.queryType() != QNetworkProxyQuery::UdpSocket
&& query.queryType() != QNetworkProxyQuery::TcpServer) {
QNetworkProxy proxy(QNetworkProxy::HttpProxy, url.host(),
url.port() ? url.port() : 8080, url.userName(), url.password());
proxyList << proxy;
}
}
if (proxyList.isEmpty())
proxyList << QNetworkProxy::NoProxy;
return proxyList;
}
QT_END_NAMESPACE
#endif