[http] sanitize class name of post object

linev · linev · commit cc20b4274772 · 2026-05-08T17:11:00.000+02:00
diff --git a/net/httpsniff/src/TRootSnifferFull.cxx b/net/httpsniff/src/TRootSnifferFull.cxx
@@ -705,7 +705,7 @@ Bool_t TRootSnifferFull::ProduceExe(const std::string &path, const std::string &
             }
             val = sval.Data();
          } else if ((strcmp(val, "_post_object_") == 0) && url.HasOption("_post_class_")) {
-            TString clname = url.GetValueFromOptions("_post_class_");
+            TString clname = DecodeUrlOptionValue(url.GetValueFromOptions("_post_class_"), kTRUE);
             TClass *arg_cl = gROOT->GetClass(clname, kTRUE, kTRUE);
             if ((arg_cl != nullptr) && (arg_cl->GetBaseClassOffset(TObject::Class()) == 0) && (post_obj == nullptr)) {
                post_obj = (TObject *)arg_cl->New();

Original file line number	Diff line number	Diff line change
`@@ -705,7 +705,7 @@ Bool_t TRootSnifferFull::ProduceExe(const std::string &path, const std::string &`
`705`	`705`	`}`
`706`	`706`	`val = sval.Data();`
`707`	`707`	`} else if ((strcmp(val, "_post_object_") == 0) && url.HasOption("_post_class_")) {`
`708`		`- TString clname = url.GetValueFromOptions("_post_class_");`
	`708`	`+ TString clname = DecodeUrlOptionValue(url.GetValueFromOptions("_post_class_"), kTRUE);`
`709`	`709`	`TClass *arg_cl = gROOT->GetClass(clname, kTRUE, kTRUE);`
`710`	`710`	`if ((arg_cl != nullptr) && (arg_cl->GetBaseClassOffset(TObject::Class()) == 0) && (post_obj == nullptr)) {`
`711`	`711`	`post_obj = (TObject *)arg_cl->New();`