diff options
author | Eric Wong <e@80x24.org> | 2016-05-25 01:44:46 +0000 |
---|---|---|
committer | Eric Wong <e@80x24.org> | 2016-05-25 01:49:54 +0000 |
commit | 23a4e44bedabe5b8b651346cabc2a870c5377a30 (patch) | |
tree | e92220e935276cd1a2f466fa4bc6bf1e29fdb8e0 /lib/PublicInbox/Address.pm | |
parent | 64aea34d06f71828b0bdd6ae177b9bcf22d752b4 (diff) | |
download | public-inbox-23a4e44bedabe5b8b651346cabc2a870c5377a30.tar.gz |
git has stricter requirements for ident names (no '<>') which Email::Address allows. Even in 1.908, Email::Address also has an incomplete fix for CVE-2015-7686 with a DoS-able regexp for comments. Since we don't care for or need all the RFC compliance of Email::Address, avoiding it entirely may be preferable. Email::Address will still be installed as a requirement for Email::MIME, but it is only used by the Email::MIME::header_str_set which we do not use
Diffstat (limited to 'lib/PublicInbox/Address.pm')
-rw-r--r-- | lib/PublicInbox/Address.pm | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/lib/PublicInbox/Address.pm b/lib/PublicInbox/Address.pm new file mode 100644 index 00000000..ef4cbdc6 --- /dev/null +++ b/lib/PublicInbox/Address.pm @@ -0,0 +1,25 @@ +# Copyright (C) 2016 all contributors <meta@public-inbox.org> +# License: AGPL-3.0+ <https://www.gnu.org/licenses/agpl-3.0.txt> +package PublicInbox::Address; +use strict; +use warnings; + +# very loose regexes, here. We don't need RFC-compliance, +# just enough to make thing sanely displayable and pass to git + +sub emails { ($_[0] =~ /([^<\s]+\@[^>\s]+)/g) } + +sub from_name { + my ($val) = @_; + my $name = $val; + $name =~ s/\s*\S+\@\S+\s*\z//; + if ($name !~ /\S/ || $name =~ /[<>]/) { # git does not like [<>] + ($name) = emails($val); + $name =~ s/\@.*//; + } + $name =~ tr/\r\n\t/ /; + $name =~ s/\A\s*//; + $name; +} + +1; |