Project

General

Profile

Bug #138

Missing input validation for aliases

Added by Chris Buechler over 9 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
Start date:
11/08/2009
Due date:
% Done:

100%

Estimated time:
Affected Version:
All
Affected Architecture:

Description

Aliases have nearly no input validation, making it very easy to create invalid rulesets.

Associated revisions

Revision f71e0ac6 (diff)
Added by Ermal Luçi over 9 years ago

Resolves #138 Add propper input validation to aliases. Do not allow to nested different types of aliases. Do not allow on ports to enter something that is not in the range 0-65535.

History

#1 Updated by Ermal Luçi over 9 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

#2 Updated by Ermal Luçi over 9 years ago

For the record still some strings will pass as valid hostname though the only way to prevent that is the usage of gethostbyname() which can add to much delays into this even seeming the page has blocked.
For now leave it like this we have to see later on.

#3 Updated by Chris Buechler over 9 years ago

  • Status changed from Resolved to Feedback
  • Target version set to 2.0

sounds good, looks ok at a glance. Needs testing

#4 Updated by Chris Buechler over 9 years ago

  • Status changed from Feedback to Resolved

fixed

Also available in: Atom PDF