michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-03-20 16:50:24 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Fix to always use quotemeta

Browse Source
This commit is contained in:
iliajie
2023-02-28 20:36:39 +02:00
parent ead01b541e
commit 31eb218094
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
filemin/setfacl.cgi
View File

@@ -43,13 +43,16 @@ error($text{'acls_error'}) if (!$cmd);
# Params are not accepted in clear mode
my $types;
if ($action ne '-b' && $action ne '-k') {
$types = join(',',@types) if (@types);
$types .= " $extra" if ($extra);
$types = quotemeta(join(',',@types)) if (@types);
if ($extra) {
my @extra = split(/\s+/, $extra);
@extra = map { quotemeta($_) } @extra;
$types .= " ".join(' ', @extra) ;
}
}
my $args = "$action $types $recursive";
my $args = quotemeta($action)." ".$types." ".quotemeta($recursive);
$args =~ s/\s+/ /g;
$args = &trim($args);
$args =~ s/[\`\$\;\/\'\"\?\%\&\#\*\(\)\+]//g;
foreach my $file (@files) {
my $qfile = quotemeta("$path/$file");
next if (!-r "$path/$file");