[Fix] Do not allow garbadge when checking url domain

diff --git a/src/libserver/url.c b/src/libserver/url.c
index 824c0dff88804e35e773a95d294434ea8ae6338c..f7a73ac5a7f3f992bc828e3e5f68202d91ba8544 100644 (file)
--- a/src/libserver/url.c
+++ b/src/libserver/url.c
@@ -965,9 +965,17 @@ rspamd_web_parse (struct http_parser_url *u, const gchar *str, gsize len,
 
                                                        p = p + i;
                                                }
-                                               else {
+                                               else if (is_urlsafe (*p)) {
                                                        p ++;
                                                }
+                                               else {
+                                                       if (strict) {
+                                                               goto out;
+                                                       }
+                                                       else {
+                                                               goto set;
+                                                       }
+                                               }
                                        }
                                        else {
                                                p++;