Bug 3233: Invalid URL accepted with url host is white spaces

diff --git a/src/url.cc b/src/url.cc
index c93a13931f5d99d0179e8e7ccb6a5285d12bad66..44876fe144da240149ed86a1b21d40f213475473 100644 (file)
--- a/src/url.cc
+++ b/src/url.cc
@@ -270,7 +270,8 @@ urlParse(const HttpRequestMethod& method, char *url, HttpRequest *request)
         /* Then everything until first /; thats host (and port; which we'll look for here later) */
         // bug 1881: If we don't get a "/" then we imply it was there
         // bug 3074: We could just be given a "?" or "#". These also imply "/"
-        for (dst = host; i < l && *src != '/' && *src != '?' && *src != '#' && *src != '\0'; i++, src++, dst++) {
+        // bug 3233: whitespace is also a hostname delimiter.
+        for (dst = host; i < l && *src != '/' && *src != '?' && *src != '#' && *src != '\0' && !xisspace(*src); i++, src++, dst++) {
             *dst = *src;
         }