Reject arguments containing new line characters

Refs bec3321fff
This commit is contained in:
Romain Vimont 2024-09-14 21:21:48 +02:00
parent 8453e3ba7d
commit e03888d587
1 changed files with 1 additions and 1 deletions

View File

@ -225,7 +225,7 @@ validate_string(const char *s) {
// special shell characters. // special shell characters.
// Since they are not properly escaped on Windows anyway (see // Since they are not properly escaped on Windows anyway (see
// sys/win/process.c), just forbid special shell characters. // sys/win/process.c), just forbid special shell characters.
if (strpbrk(s, " ;'\"*$?&`#\\|<>[]{}()!~")) { if (strpbrk(s, " ;'\"*$?&`#\\|<>[]{}()!~\r\n")) {
LOGE("Invalid server param: [%s]", s); LOGE("Invalid server param: [%s]", s);
return false; return false;
} }