diff options
uri: Remove access() check
Otherwise it was returning `NULL` and sending out the path of non-readable files
over HTTP (unencrypted) could be unintended.
Better to fail in a local path than be sorry.
1 files changed, 1 insertions, 5 deletions
| -rw-r--r-- | uri.c | 6 |
@@ -26,11 +26,7 @@ badwolf_ensure_uri_scheme(const gchar *text, gboolean try_file) if(path != NULL) { - /* flawfinder: ignore. only used as presence check, no way to pass file descriptor */ - if(access(path, R_OK) == 0) - { - f = g_strdup_printf("file://%s", path); - } + f = g_strdup_printf("file://%s", path); free(path); |