Просмотр исходного кода

Fix/2021 03 validate interface field (#1666)

* Valid  interface input v-add-sys-ip

* Update changelog

Co-authored-by: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
Raphael Schneeberger 5 лет назад
Родитель
Сommit
1a6555503a
2 измененных файлов с 2 добавлено и 0 удалено
  1. 1 0
      CHANGELOG.md
  2. 1 0
      func/main.sh

+ 1 - 0
CHANGELOG.md

@@ -40,6 +40,7 @@ All notable changes to this project will be documented in this file.
 - Improved IDN domain handling to resolve issues with Let's Encrypt SSL and mail domain services.
 - Added private folder to openbasedir permission for all main templates.
 - Disabled changing backup folder via Web UI because it used symbolic link instead of mount causing issues with restore mail / user files.
+- Fix xss vulnerability in v-add-sys-ip (thanks @numanturle)
 
 ## [1.3.3] - Service Release
 ### Bugfixes

+ 1 - 0
func/main.sh

@@ -962,6 +962,7 @@ is_format_valid() {
                 host)           is_object_format_valid "$arg" "$arg_name" ;;
                 hour)           is_cron_format_valid "$arg" $arg_name ;;
                 id)             is_int_format_valid "$arg" 'id' ;;
+                interface)      is_interface_format_valid "$arg" ;;
                 ip)             is_ip_format_valid "$arg" ;;
                 ip_name)        is_domain_format_valid "$arg" 'IP name';;
                 ip_status)      is_ip_status_format_valid "$arg" ;;