qnetworkproxy_generic.cpp

Go to the documentation of this file.

// Copyright (C) 2016 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
// Qt-Security score:critical reason:data-parser
 
#include "qnetworkproxy.h"
 
#include <QtCore/QByteArray>
#include <QtCore/QUrl>
 
#ifndef QT_NO_NETWORKPROXY
 
/*
 * Construct a proxy from the environment variables http_proxy and no_proxy.
 * Or no system proxy. Just return a list with NoProxy.
 */
 
QT_BEGIN_NAMESPACE
 
using namespace Qt::StringLiterals;
 
static bool ignoreProxyFor(const QNetworkProxyQuery &query)
{
    const QByteArray noProxy = qgetenv("no_proxy").trimmed();
    if (noProxy.isEmpty())
        return false;
 
    const QString host = query.peerHostName();
 
    const QList<QByteArray> noProxyTokens = noProxy.split(',');
 
    for (const QByteArray &rawToken : noProxyTokens) {
        QString token = QString::fromUtf8(rawToken).trimmed();
 
        // A lone "*" bypasses every host, which suffix matching cannot express.
        if (token == "*"_L1)
            return true;
 
        // A leading "*" is redundant once the rest is matched as a suffix.
        if (token.startsWith(u'*'))
            token = token.mid(1);
 
        // Harmonize trailing dot notation
        if (token.endsWith(u'.') && !host.endsWith(u'.'))
            token = token.chopped(1);
 
        if (token.startsWith(u'.')) // leading dot is implied
            token = token.mid(1);
 
        // QUrl hands back a canonical host, so put the entry in that form.
        if (const QByteArray ace = QUrl::toAce(token); !ace.isEmpty())
            token = QUrl::fromAce(ace);
 
        if (host.endsWith(token)) {
 
            // Make sure that when we have a suffix match,
            // we don't match "donotmatch.com" with "match.com"
 
            if (host.size() == token.size())                  // iow: host == token
                return true;
            if (host[host.size() - token.size() - 1] == u'.') // match follows a dot
                return true;
        }
    }
 
    return false;
}
 
QList<QNetworkProxy> QNetworkProxyFactory::systemProxyForQuery(const QNetworkProxyQuery &query)
{
    QList<QNetworkProxy> proxyList;
 
    if (ignoreProxyFor(query))
        return proxyList << QNetworkProxy::NoProxy;
 
    // No need to care about casing here, QUrl lowercases values already
    const QString queryProtocol = query.protocolTag();
    QByteArray proxy_env;
 
    if (queryProtocol == "http"_L1)
        proxy_env = qgetenv("http_proxy");
    else if (queryProtocol == "https"_L1)
        proxy_env = qgetenv("https_proxy");
    else if (queryProtocol == "ftp"_L1)
        proxy_env = qgetenv("ftp_proxy");
    else
        proxy_env = qgetenv("all_proxy");
 
    // Fallback to http_proxy is no protocol specific proxy was found
    if (proxy_env.isEmpty())
        proxy_env = qgetenv("http_proxy");
 
    if (!proxy_env.isEmpty()) {
        QUrl url = QUrl(QString::fromLocal8Bit(proxy_env));
        const QString scheme = url.scheme();
        if (scheme == "socks5"_L1 || scheme == "socks5h"_L1) {
            QNetworkProxy proxy(QNetworkProxy::Socks5Proxy, url.host(),
                    url.port() ? url.port() : 1080, url.userName(), url.password());
            proxyList << proxy;
        } else if ((scheme.isEmpty() || scheme == "http"_L1)
                  && query.queryType() != QNetworkProxyQuery::UdpSocket
                  && query.queryType() != QNetworkProxyQuery::TcpServer) {
            QNetworkProxy proxy(QNetworkProxy::HttpProxy, url.host(),
                    url.port() ? url.port() : 8080, url.userName(), url.password());
            proxyList << proxy;
        }
    }
    if (proxyList.isEmpty())
        proxyList << QNetworkProxy::NoProxy;
 
    return proxyList;
}
 
QT_END_NAMESPACE
 
#endif