Actions
Bug #138
closed
Missing input validation for aliases
Start date:
11/08/2009
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
Description
Aliases have nearly no input validation, making it very easy to create invalid rulesets.
Updated by Ermal Luçi about 15 years ago
- Status changed from New to Resolved
- % Done changed from 0 to 100
Applied in changeset f71e0ac64d69f423ae202afa93cb13b745ccff99.
Updated by Ermal Luçi about 15 years ago
For the record still some strings will pass as valid hostname though the only way to prevent that is the usage of gethostbyname() which can add to much delays into this even seeming the page has blocked.
For now leave it like this we have to see later on.
Updated by Chris Buechler about 15 years ago
- Status changed from Resolved to Feedback
- Target version set to 2.0
sounds good, looks ok at a glance. Needs testing
Actions