sebauer / if-this-then-node

An extendible NodeJS app to receive actions from IFTTT (If This Then That).
http://sebauer.github.io/if-this-then-node/
81 stars 12 forks source link

Add more security for command parameters #2

Open sebauer opened 10 years ago

sebauer commented 10 years ago

Currently command parameters are not filtered against any unwanted input. There has to be some validation and input filtering in order to avoid unwanted commands being executed on the target system.

This may include filtering semicolons, pipes and other characters but may only be done on a plugin level.