Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Jun 2025 14:21:39 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 287615] Minor fix to quoting in jail.c
Message-ID:  <bug-287615-227-4fLzOhCCmD@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-287615-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=287615

Jim Long <freebsd-bugzilla@umpquanet.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #261352|0                           |1
        is obsolete|                            |

--- Comment #2 from Jim Long <freebsd-bugzilla@umpquanet.com> ---
Created attachment 261437
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=261437&action=edit
Extend "jail -e" quoting protection to: | ` < > &

This is still sub-optimal, but making this 100% correct is somewhat fraught, as
it depends at least in part on which shell or scripting language the escaping
is intended to protect against.

I've altered my patch to include a few more of the most common meta-characters.

Thanks again for your attention to this issue.

Jim

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-287615-227-4fLzOhCCmD>