BPI/luci
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
luci/modules/luci-base/luasrc
History
Jo-Philipp Wich 2360ebc2e8 luci-base: sys: prevent path traversal via sys.init routines 
Filter the init script name parameter through fs.basename() to avoid
invoking paths outside of /etc/init.d/.

Reported-by: Graham R <gr348@cam.ac.uk>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(cherry picked from commit 8752701b0d01a81d0bd0a735be733f24ad11ab69)
2022-01-19 16:34:07 +01:00
..
controller/admin
luci-base: implement JSON endpoint to fetch menu information
2020-04-16 13:30:35 +02:00
model
luci-base: set the fallback default of rollback timeout to 90s
2020-10-21 18:47:38 +03:00
sgi
treewide: removed trailing whitespaces and extra newlines in 'modules'
2021-01-20 17:48:16 +02:00
sys
timezone data: update to 2021e
2021-10-28 21:29:56 +03:00
view
luci-base: sysauth.htm: switch https detection URL
2021-10-12 23:05:22 +02:00
cacheloader.lua
treewide: minor fixes to typos, whitespace, and indentation
2021-01-20 12:36:13 +02:00
ccache.lua
treewide: removed trailing whitespaces and extra newlines in 'modules'
2021-01-20 17:48:16 +02:00
config.lua
Globally reduce copyright headers
2015-01-16 23:38:38 +01:00
dispatcher.lua
luci-base: send failed/successfull login to syslog
2021-12-03 23:27:39 +01:00
dispatcher.luadoc
luci-base: dispatcher: remove tree modifier support
2018-11-27 14:46:55 +01:00
i18n.lua
luci-base: remove unused i18n functions
2018-11-05 11:01:45 +01:00
i18n.luadoc
luci-base: remove unused i18n functions
2018-11-05 11:01:45 +01:00
store.lua
treewide: minor fixes to typos, whitespace, and indentation
2021-01-20 12:36:13 +02:00
sys.lua
luci-base: sys: prevent path traversal via sys.init routines
2022-01-19 16:34:07 +01:00
sys.luadoc
luci-base: remove references to removed functions from documentation
2021-06-12 19:19:29 +02:00
template.lua
treewide: removed trailing whitespaces and extra newlines in 'modules'
2021-01-20 17:48:16 +02:00
version.lua
Globally reduce copyright headers
2015-01-16 23:38:38 +01:00
xml.lua
luci-base(-libs): move pcdata() and striptags() from util- to xml-class
2020-07-19 20:14:35 +02:00
xml.luadoc
luci-base(-libs): move pcdata() and striptags() from util- to xml-class
2020-07-19 20:14:35 +02:00