1
0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2025-04-21 03:02:09 +00:00

vulnerability fix.

This commit is contained in:
bizonix 2016-08-19 18:58:30 +03:00 committed by GitHub
parent 86457e5bc4
commit 3ca9de2e00

View File

@ -562,7 +562,7 @@ def munin_cgi(filename):
if filename == "": if filename == "":
return ("a path must be specified", 404) return ("a path must be specified", 404)
query_str = request.query_string.decode("utf-8", 'ignore') query_str = request.query_string.decode("utf-8", 'ignore').replace('"', r'\"')
env = {'PATH_INFO': '/%s/' % filename, 'QUERY_STRING': query_str} env = {'PATH_INFO': '/%s/' % filename, 'QUERY_STRING': query_str}
cmd = COMMAND % query_str cmd = COMMAND % query_str