AlternC / alternc-mailman

Mailman module for AlternC
2 stars 10 forks source link

limits the authorized characters for listname, to avoid command injection #4

Closed fser closed 6 years ago

fser commented 8 years ago

This patch prevents user from using characters other than letters, digit and underscore in list names. This should solve https://github.com/AlternC/alternc-mailman/issues/1 and https://github.com/AlternC/alternc-mailman/issues/3.

In the future, same restriction could be applied to password, but eventually, the cron script will have to be fixed.