- Correção de validação de DataRoute.

OpenSourceCommunityBrasil · May 17, 2023 · 5bd8c76 · 5bd8c76
1 parent 7c80d13
commit 5bd8c76
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 7 deletions.
diff --git a/CORE/Source/Basic/uRESTDWBasic.pas b/CORE/Source/Basic/uRESTDWBasic.pas
@@ -15,7 +15,6 @@
 
  XyberX (Gilberto Rocha)    - Admin - Criador e Administrador  do pacote.
  Alexandre Abbade           - Admin - Administrador do desenvolvimento de DEMOS, coordenador do Grupo.
- Anderson Fiori             - Admin - Gerencia de Organização dos Projetos
  Flávio Motta               - Member Tester and DEMO Developer.
  Mobius One                 - Devel, Tester and Admin.
  Gustavo                    - Criptografia and Devel.
@@ -2049,11 +2048,18 @@ procedure TRESTClientPoolerBase.SetIpVersion(IpV: TRESTDWClientIpVersions);
 
      //
      // DataRoute DR001
-     //
-     if (pos('/', cmd, 2) > 0) or (pos('\', cmd, 1) > 0) then
-       vDataRoute := Copy(cmd, 1, pos('/', cmd, 2));
-
-     if not vDataRouteList.RouteExists(vDataRoute) then vDataRoute := '';
+     // verifica o dataroute na URL do request: "cmd"
+     if vDataRouteList.Count > 0 then
+     begin
+       if (pos('/', cmd, 2) > 0) or (pos('\', cmd, 1) > 0) then
+         vDataRoute := Copy(cmd, 1, pos('/', cmd, 2));
+
+       if not vDataRouteList.RouteExists(vDataRoute) then
+       begin
+         WriteResponseText(cInvalidRequest, 400);
+         exit;
+       end;
+     end;
 
      // DataRoute block
 

diff --git a/CORE/Source/Consts/uRESTDWConsts.pas b/CORE/Source/Consts/uRESTDWConsts.pas
@@ -15,7 +15,6 @@
 
  XyberX (Gilberto Rocha)    - Admin - Criador e Administrador do pacote.
  Alexandre Abbade           - Admin - Administrador do desenvolvimento de DEMOS, coordenador do Grupo.
- Anderson Fiori             - Admin - Gerencia de Organização dos Projetos
  Flávio Motta               - Member Tester and DEMO Developer.
  Mobius One                 - Devel, Tester and Admin.
  Gustavo                    - Criptografia and Devel.