diff options
| author | Jo-Philipp Wich <jo@mein.io> | 2018-11-14 13:37:51 +0100 |
|---|---|---|
| committer | Jo-Philipp Wich <jo@mein.io> | 2018-11-14 20:46:04 +0100 |
| commit | 6f7736c436e1759098102859559f1313ad0669db (patch) | |
| tree | e75ebe417e764c0b9220c2e76719f37e486393d5 /modules/luci-mod-system/luasrc/view/admin_system | |
| parent | aa2e0e2488f52b2b0acd1746ee13c7f51377f757 (diff) | |
luci-mod-system: prevent comment injection in mtdbackup endpoint
Rework the parameter handling to both prevent a crash when no parameter is
given and to prevent root command injection through the mtd index part of
the parameter value.
Fixes: 9840d310e ("modules: add backup module for mtdblock devices")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'modules/luci-mod-system/luasrc/view/admin_system')
0 files changed, 0 insertions, 0 deletions