Closed KiLLuuuhh closed 4 months ago
Please add a changelog fragment for the bug fix.
See https://github.com/puzzle/puzzle.opnsense/blob/main/changelogs/fragments/117-remove-user-shell-attribute-as-enum.yml as an example. The naming of the file must follow the convention of <PR_NR>-<TITLE>.yml
This pull request addresses several critical issues within the system_access_users module, enhancing security and functionality.
Issues and Solutions:
Password Sanitization:
\
) or an apostrophe ('
), it would cause parsing errors, such as:unexpected identifier "cost", expecting (
.Password Verification:
Group removal handling
groupname
is not updated_update_user_groups
function, so that the attributegroupname
is updated or removed as wellRelated Issues:
Closes #120.