fix: sanitize domain input to prevent command injection

LukeSmithxyz / emailwiz

Script that installs/configures a Dovecot, Postfix, Spam Assassin, OpenDKIM Debian web server

GNU General Public License v3.0

1.82k stars 301 forks source link

fix: sanitize domain input to prevent command injection #334

Open alpernae opened 2 weeks ago

alpernae commented 2 weeks ago

This PR addresses a command injection vulnerability in adddomain.sh by sanitizing the domain input. The updated code checks that domain contains only valid domain characters, which mitigates the risk of command injection.