mirror of
https://github.com/mail-in-a-box/mailinabox.git
synced 2025-04-21 03:02:09 +00:00
vulnerability fix.
This commit is contained in:
parent
86457e5bc4
commit
3ca9de2e00
@ -562,7 +562,7 @@ def munin_cgi(filename):
|
|||||||
if filename == "":
|
if filename == "":
|
||||||
return ("a path must be specified", 404)
|
return ("a path must be specified", 404)
|
||||||
|
|
||||||
query_str = request.query_string.decode("utf-8", 'ignore')
|
query_str = request.query_string.decode("utf-8", 'ignore').replace('"', r'\"')
|
||||||
|
|
||||||
env = {'PATH_INFO': '/%s/' % filename, 'QUERY_STRING': query_str}
|
env = {'PATH_INFO': '/%s/' % filename, 'QUERY_STRING': query_str}
|
||||||
cmd = COMMAND % query_str
|
cmd = COMMAND % query_str
|
||||||
|
Loading…
Reference in New Issue
Block a user