www-cgi/: Decentralize the whitelist of environment variables.

[userv-utils.git] / www-cgi / ucgi.c

diff --git a/www-cgi/ucgi.c b/www-cgi/ucgi.c
index c4c072d8c6a2dce15c291038b542ed529338c253..006f8ae4cd93223986d15c146967d032908eeefa 100644 (file)
--- a/www-cgi/ucgi.c
+++ b/www-cgi/ucgi.c
@@ -30,6 +30,25 @@
 
 #include "ucgi.h"
 
 
 #include "ucgi.h"
 

+static const char *const envok[] = {
+  "AUTH_TYPE",
+  "CONTENT_TYPE",
+  "CONTENT_LENGTH",
+  "DOCUMENT_ROOT",
+  "GATEWAY_INTERFACE",
+  "HTTP_*",
+  "HTTPS",
+  "PATH_INFO",
+  "PATH_TRANSLATED",
+  "QUERY_STRING",
+  "REMOTE_*",
+  "REQUEST_METHOD",
+  "REQUEST_URI",
+  "SCRIPT_*",
+  "SERVER_*",
+  0
+};
+

 struct buildargs {
   const char **v;
   int n, max;
 struct buildargs {
   const char **v;
   int n, max;