mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-27 11:13:24 +02:00
proxy.cgi: Correctly validate domain lists
Fixes: #12925 - JVN#15411362 Inquiry on vulnerability found in IPFire Reported-by: Noriko Totsuka <vuls@jpcert.or.jp> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
committed by
Peter Müller
parent
7cb63527d9
commit
ba4f53c565
@@ -756,6 +756,17 @@ sub validdomainname
|
||||
return 1;
|
||||
}
|
||||
|
||||
sub validwildcarddomainname($) {
|
||||
my $domainname = shift;
|
||||
|
||||
# Ignore any leading dots
|
||||
if ($domainname =~ m/^\*\.(.*)/) {
|
||||
$domainname = $1;
|
||||
}
|
||||
|
||||
return &validdomainname($domainname);
|
||||
}
|
||||
|
||||
sub validfqdn
|
||||
{
|
||||
# Checks a fully qualified domain name against RFC1035 and RFC2181
|
||||
|
||||
Reference in New Issue
Block a user