Merge branch 'release-1.36' of github.com:ZoneMinder/zoneminder into release-1.36

pull/4202/head
Isaac Connor 2024-01-02 14:09:20 -05:00
commit 1c3b9fd4c1
1 changed files with 1 additions and 0 deletions

View File

@ -6,6 +6,7 @@ class HostController extends AppController {
public $components = array('RequestHandler');
public function daemonCheck($daemon=false, $args=false) {
$count = 0;
# To try to prevent abuse here, we are only going to allow certain characters in the daemon and args.
$safe_daemon = $daemon ? preg_replace('/[^A-Za-z0-9\- \.]/', '', $daemon, -1, $count) : false;
if ($count) Error("Invalid characters found in daemon string ($daemon). Potential attack?");