michael/webmin
1
0
Fork 0
mirror of https://github.com/webmin/webmin.git synced 2026-03-20 16:50:24 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Fix to escape even static params

Browse Source
This commit is contained in:
Ilia
2022-03-22 11:09:41 +02:00
parent 1066fd79af
commit a7790c5fc7
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
webmin/webmin-lib.pl
View File

@@ -665,9 +665,9 @@ foreach my $k (@keys) {
}
# Key been imported before but contact changed, delete first
elsif ($k->{'email'}->[0] ne $email && $fp && $fp eq $finger) {
my $finger_ = $finger;
$finger_ =~ s/\s+//g;
my $out = &backquote_logged("$gpgpath --batch --delete-key $finger_ 2>&1");
my $lfinger = $finger;
$lfinger =~ s/\s+//g;
my $out = &backquote_logged("$gpgpath --batch --delete-key ".quotemeta($lfinger)." 2>&1");
if ($?) {
return (2, $out);
}
@@ -676,7 +676,7 @@ foreach my $k (@keys) {
# Import it if not
&list_keys();
my $out = &backquote_logged("$gpgpath --import $path 2>&1");
my $out = &backquote_logged("$gpgpath --import ".quotemeta($path)." 2>&1");
if ($?) {
return (2, $out);
}