kiss-community/kiss
1
0
Fork 1
mirror of https://codeberg.org/kiss-community/kiss synced 2024-12-25 00:20:05 -07:00
Code Issues Wiki

kiss: more relaxed sanitization as per POSIX globbing spec.

Browse Source
This commit is contained in:
Dylan Araps 2019-10-01 22:48:30 +03:00
parent 718b774f3c
commit bae681f84f
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
kiss
View File

@ -858,9 +858,12 @@ args() {
# Unless this is a search, sanitize the user's input. The call to
# 'pkg_find()' supports basic globbing, ensure input doesn't expand
# to anything except for when this behavior is needed.
#
# This handles the globbing characters '*', '!', '[' and ']' as per:
# https://pubs.opengroup.org/onlinepubs/009695399/utilities/xcu_chap02.html
[ "$action" != search ] && [ "$action" != s ] &&
case $* in
*[!a-zA-Z0-9_-]*)
*'*'*|*'!'*|*'['*|*']'*)
log kiss "$action $*"
die "Arguments contain invalid characters"
;;