michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-02-03 14:13:29 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix to use quotemeta instead

Browse Source 
69681c01d4 (r162892280)
This commit is contained in:
Ilia Ross
2025-07-26 14:21:45 +03:00
parent 69681c01d4
commit 3d2ea49a47
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
web-lib-funcs.pl
View File

@@ -14021,9 +14021,8 @@ unless ($openssl) {
# Temp file for plaintext
my $src = &transname();
&write_file_contents($src, $plain);
# Shell-escape single quotes in the passphrase
$passphrase =~ s/'/'\\''/g;
# Encrypt
$passphrase = quotemeta($passphrase);
my $cmd = "$openssl enc -aes-256-cbc -a -A -salt -pbkdf2 -iter 100000 ".
"-pass pass:'$passphrase' <$src 2>&1";
my $out = &backquote_logged($cmd);
@@ -14055,9 +14054,8 @@ if (!$openssl) {
# Tempfile for ciphertext
my $src = &transname();
&write_file_contents($src, $cipher);
# Shell-escape single quotes in the passphrase
$passphrase =~ s/'/'\\''/g;
# Decrypt
$passphrase = quotemeta($passphrase);
my $cmd = "$openssl enc -d -aes-256-cbc -a -A -pbkdf2 -iter 100000 ".
"-pass pass:'$passphrase' <$src 2>&1";
my $out = &backquote_logged($cmd);