Open dromer opened 3 years ago
Needs some better input sanitization. Took me a while to figure out the compiler errors came from the name containing ().
()
With a bit more effort I bet I could get some privilege escalation here, so better make sure this gets locked down!
@pingdynasty, A check on the UI for this is in place now. we need to agree on the regexp for it, as of now:
^[a-zA-Z0-9.\\+_ -]+$
Needs some better input sanitization. Took me a while to figure out the compiler errors came from the name containing
()
.With a bit more effort I bet I could get some privilege escalation here, so better make sure this gets locked down!