1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
|
/* URL check functions */
#ifndef URL_H
#define URL_H
#include "config.h"
#include "mem_pool.h"
#include "fstring.h"
struct rspamd_task;
struct rspamd_mime_text_part;
enum rspamd_url_flags {
RSPAMD_URL_FLAG_PHISHED = 1 << 0,
RSPAMD_URL_FLAG_NUMERIC = 1 << 1,
RSPAMD_URL_FLAG_OBSCURED = 1 << 2,
RSPAMD_URL_FLAG_REDIRECTED = 1 << 3,
RSPAMD_URL_FLAG_HTML_DISPLAYED = 1 << 4,
RSPAMD_URL_FLAG_FROM_TEXT = 1 << 5,
RSPAMD_URL_FLAG_SUBJECT = 1 << 6,
RSPAMD_URL_FLAG_HOSTENCODED = 1 << 7,
RSPAMD_URL_FLAG_SCHEMAENCODED = 1 << 8,
RSPAMD_URL_FLAG_PATHENCODED = 1 << 9,
RSPAMD_URL_FLAG_QUERYENCODED = 1 << 10,
RSPAMD_URL_FLAG_MISSINGSLASHES = 1 << 11,
RSPAMD_URL_FLAG_IDN = 1 << 12,
RSPAMD_URL_FLAG_HAS_PORT = 1 << 13,
RSPAMD_URL_FLAG_HAS_USER = 1 << 14,
RSPAMD_URL_FLAG_SCHEMALESS = 1 << 15,
RSPAMD_URL_FLAG_UNNORMALISED = 1 << 16,
RSPAMD_URL_FLAG_ZW_SPACES = 1 << 17,
};
struct rspamd_url_tag {
const gchar *data;
struct rspamd_url_tag *prev, *next;
};
struct rspamd_url {
gchar *raw;
gchar *string;
gint protocol;
guint port;
gchar *user;
gchar *host;
gchar *data;
gchar *query;
gchar *fragment;
gchar *surbl;
gchar *tld;
struct rspamd_url *phished_url;
guint protocollen;
guint userlen;
guint hostlen;
guint datalen;
guint querylen;
guint fragmentlen;
guint surbllen;
guint tldlen;
guint urllen;
guint rawlen;
enum rspamd_url_flags flags;
guint count;
GHashTable *tags;
};
enum uri_errno {
URI_ERRNO_OK = 0, /* Parsing went well */
URI_ERRNO_EMPTY, /* The URI string was empty */
URI_ERRNO_INVALID_PROTOCOL, /* No protocol was found */
URI_ERRNO_INVALID_PORT, /* Port number is bad */
URI_ERRNO_BAD_ENCODING, /* Bad characters encoding */
URI_ERRNO_BAD_FORMAT,
URI_ERRNO_TLD_MISSING,
URI_ERRNO_HOST_MISSING
};
enum rspamd_url_protocol {
PROTOCOL_FILE = 0,
PROTOCOL_FTP,
PROTOCOL_HTTP,
PROTOCOL_HTTPS,
PROTOCOL_MAILTO,
PROTOCOL_TELEPHONE,
PROTOCOL_UNKNOWN
};
/**
* Initialize url library
* @param cfg
*/
void rspamd_url_init (const gchar *tld_file);
void rspamd_url_deinit (void);
/*
* Parse urls inside text
* @param pool memory pool
* @param task task object
* @param part current text part
* @param is_html turn on html euristic
*/
void rspamd_url_text_extract (rspamd_mempool_t *pool,
struct rspamd_task *task,
struct rspamd_mime_text_part *part,
gboolean is_html);
enum rspamd_url_parse_flags {
RSPAMD_URL_PARSE_TEXT = 0,
RSPAMD_URL_PARSE_HREF = (1u << 0),
RSPAMD_URL_PARSE_CHECK = (1 << 1),
};
/*
* Parse a single url into an uri structure
* @param pool memory pool
* @param uristring text form of url
* @param uri url object, must be pre allocated
*/
enum uri_errno rspamd_url_parse (struct rspamd_url *uri,
gchar *uristring,
gsize len,
rspamd_mempool_t *pool,
enum rspamd_url_parse_flags flags);
/*
* Try to extract url from a text
* @param pool memory pool
* @param begin begin of text
* @param len length of text
* @param start storage for start position of url found (or NULL)
* @param end storage for end position of url found (or NULL)
* @param url_str storage for url string(or NULL)
* @return TRUE if url is found in specified text
*/
gboolean rspamd_url_find (rspamd_mempool_t *pool, const gchar *begin, gsize len,
gchar **url_str, gboolean is_html, goffset *url_pos,
gboolean *prefix_added);
/*
* Return text representation of url parsing error
*/
const gchar * rspamd_url_strerror (enum uri_errno err);
/**
* Find TLD for a specified host string
* @param in input host
* @param inlen length of input
* @param out output rspamd_ftok_t with tld position
* @return TRUE if tld has been found
*/
gboolean rspamd_url_find_tld (const gchar *in, gsize inlen, rspamd_ftok_t *out);
typedef void (*url_insert_function) (struct rspamd_url *url,
gsize start_offset, gsize end_offset, void *ud);
/**
* Search for multiple urls in text and call `func` for each url found
* @param pool
* @param in
* @param inlen
* @param is_html
* @param func
* @param ud
*/
void rspamd_url_find_multiple (rspamd_mempool_t *pool, const gchar *in,
gsize inlen, gboolean is_html, GPtrArray *nlines,
url_insert_function func, gpointer ud);
/**
* Search for a single url in text and call `func` for each url found
* @param pool
* @param in
* @param inlen
* @param is_html
* @param func
* @param ud
*/
void rspamd_url_find_single (rspamd_mempool_t *pool, const gchar *in,
gsize inlen, gboolean is_html,
url_insert_function func, gpointer ud);
/**
* Generic callback to insert URLs into rspamd_task
* @param url
* @param start_offset
* @param end_offset
* @param ud
*/
void rspamd_url_task_subject_callback (struct rspamd_url *url,
gsize start_offset,
gsize end_offset, gpointer ud);
/**
* Adds a tag for url
* @param url
* @param tag
* @param pool
*/
void rspamd_url_add_tag (struct rspamd_url *url, const gchar *tag,
const gchar *value,
rspamd_mempool_t *pool);
guint rspamd_url_hash (gconstpointer u);
guint rspamd_email_hash (gconstpointer u);
guint rspamd_url_host_hash (gconstpointer u);
/* Compare two emails for building emails hash */
gboolean rspamd_emails_cmp (gconstpointer a, gconstpointer b);
/* Compare two urls for building emails hash */
gboolean rspamd_urls_cmp (gconstpointer a, gconstpointer b);
gboolean rspamd_urls_host_cmp (gconstpointer a, gconstpointer b);
/**
* Decode URL encoded string in-place and return new length of a string, src and dst are NULL terminated
* @param dst
* @param src
* @param size
* @return
*/
gsize rspamd_url_decode (gchar *dst, const gchar *src, gsize size);
/**
* Encode url if needed. In this case, memory is allocated from the specific pool.
* Returns pointer to begin and encoded length in `dlen`
* @param url
* @param pool
* @return
*/
const gchar * rspamd_url_encode (struct rspamd_url *url, gsize *dlen,
rspamd_mempool_t *pool);
/**
* Returns if a character is domain character
* @param c
* @return
*/
gboolean rspamd_url_is_domain (int c);
#endif
|