WebServer: Refuse to respond to requests for device files

Responding with some device files such as /dev/random never terminates, so let's just refuse that.
AmusedNetwork · Jun 11, 2021 · 450a24c · 450a24c
1 parent eb6adba
commit 450a24c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Userland/Services/WebServer/Client.cpp b/Userland/Services/WebServer/Client.cpp
@@ -116,6 +116,11 @@ void Client::handle_request(ReadonlyBytes raw_request)
  return;
  }
 
+ if (file->is_device()) {
+ send_error_response(403, request);
+ return;
+ }
+
  Core::InputFileStream stream { file };
 
  send_response(stream, request, Core::guess_mime_type_based_on_filename(real_path));