Jo-Philipp Wich 8752701b0d luci-base: sys: prevent path traversal via sys.init routines ...

Filter the init script name parameter through fs.basename() to avoid
invoking paths outside of /etc/init.d/.

Reported-by: Graham R <gr348@cam.ac.uk>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

2022-01-19 16:32:52 +01:00

..

luci-base

luci-base: sys: prevent path traversal via sys.init routines

2022-01-19 16:32:52 +01:00

luci-compat

luci-base: prevent empty field for adding new entry

2021-08-11 08:48:41 +02:00

luci-mod-admin-full

luci-base: use cgi-io and rpcd-mod-file to handle file upload and browsing

2019-09-10 15:28:16 +02:00

luci-mod-admin-mini

treewide: removed trailing whitespaces and extra newlines in 'modules'

2021-01-20 17:48:16 +02:00

luci-mod-battstatus

Translated using Weblate (Turkish)

2022-01-14 17:43:28 +02:00

luci-mod-dashboard

Translated using Weblate (Romanian)

2022-01-10 20:55:30 +02:00

luci-mod-network

luci-mod-network: fix creating new interfaces

2022-01-19 14:36:46 +01:00

luci-mod-rpc

treewide: removed trailing whitespaces and extra newlines in 'modules'

2021-01-20 17:48:16 +02:00

luci-mod-status

luci-mod-status: display full HE rate information

2022-01-07 01:09:48 +00:00

luci-mod-system

luci-mod-system: mention ED25519 keys

2022-01-19 12:10:03 +01:00