RebelTechnology / OwlServer

Web-based Client/Server application for the Open Ware Laboratory
GNU General Public License v2.0
2 stars 2 forks source link

Compilation fails when there are brackets in the patch-name #254

Open dromer opened 3 years ago

dromer commented 3 years ago

Needs some better input sanitization. Took me a while to figure out the compiler errors came from the name containing ().

With a bit more effort I bet I could get some privilege escalation here, so better make sure this gets locked down!

f-rebeltech commented 2 years ago

@pingdynasty, A check on the UI for this is in place now. we need to agree on the regexp for it, as of now:

^[a-zA-Z0-9.\\+_ -]+$