diff options
| author | John Christopher Anderson <jchris@apache.org> | 2010-07-19 22:46:14 +0000 |
|---|---|---|
| committer | John Christopher Anderson <jchris@apache.org> | 2010-07-19 22:46:14 +0000 |
| commit | 662bf6812ef0a4fa80cf137761f9b1b5a93821c0 (patch) | |
| tree | 8ac4c4e78f1f0f38e867c019df64af3a9d25a00f /src/couchdb/couch_httpd.erl | |
| parent | 11aa4f9db32ef33ef8b9e17ee2a685c95bc553b2 (diff) | |
remove unguarded atom creation to prevent DOS attacks. closes COUCHDB-829
git-svn-id: https://svn.apache.org/repos/asf/couchdb/trunk@965667 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'src/couchdb/couch_httpd.erl')
| -rw-r--r-- | src/couchdb/couch_httpd.erl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/couchdb/couch_httpd.erl b/src/couchdb/couch_httpd.erl index 079b9367..faf14bcc 100644 --- a/src/couchdb/couch_httpd.erl +++ b/src/couchdb/couch_httpd.erl @@ -225,7 +225,7 @@ handle_request_int(MochiReq, DefaultFun, true -> ?LOG_INFO("MethodOverride: ~s (real method was ~s)", [MethodOverride, Method1]), case Method1 of - 'POST' -> list_to_atom(MethodOverride); + 'POST' -> couch_util:to_existing_atom(MethodOverride); _ -> % Ignore X-HTTP-Method-Override when the original verb isn't POST. % I'd like to send a 406 error to the client, but that'd require a nasty refactor. |