From 17640476a57a41415fec579c40faebbfeff0022d Mon Sep 17 00:00:00 2001 From: jim-p Date: Mon, 9 Sep 2019 11:40:41 -0400 Subject: [PATCH] status.php: Sanitize snort/suricata oink and etpro codes. --- src/usr/local/www/status.php | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/src/usr/local/www/status.php b/src/usr/local/www/status.php index da69af48c8..312185eae6 100644 --- a/src/usr/local/www/status.php +++ b/src/usr/local/www/status.php @@ -64,14 +64,15 @@ $output_file = "/tmp/status_output.tgz"; $filtered_tags = array( 'accountkey', 'authorizedkeys', 'auth_pass', 'auth_user', 'bcrypt-hash', 'cert_key', 'crypto_password', 'crypto_password2', - 'dns_nsupdatensupdate_key', 'encryption_password', - 'gold_encryption_password', 'gold_password', 'influx_pass', 'ipsecpsk', - 'ldap_bindpw', 'lighttpd_ls_password', 'lighttpd_ls_password', - 'md5-hash', 'md5password', 'md5sigkey', 'md5sigpass', 'nt-hash', - 'passphrase', 'password', 'passwordagain', 'pre-shared-key', - 'proxypass', 'proxy_passwd', 'proxyuser', 'proxy_user', 'prv', - 'radius_secret', 'redis_password', 'redis_passwordagain', 'rocommunity', - 'secret', 'shared_key', 'tls', 'tlspskidentity', 'tlspskfile', + 'dns_nsupdatensupdate_key', 'encryption_password', 'etpro_code', + 'etprocode', 'gold_encryption_password', 'gold_password', 'influx_pass', + 'ipsecpsk', 'ldap_bindpw', 'lighttpd_ls_password', + 'lighttpd_ls_password', 'md5-hash', 'md5password', 'md5sigkey', + 'md5sigpass', 'nt-hash', 'oinkcode', 'oincmastercode', 'passphrase', + 'password', 'passwordagain', 'pre-shared-key', 'proxypass', + 'proxy_passwd', 'proxyuser', 'proxy_user', 'prv', 'radius_secret', + 'redis_password', 'redis_passwordagain', 'rocommunity', 'secret', + 'shared_key', 'tls', 'tlspskidentity', 'tlspskfile', 'varclientpasswordinput', 'varclientsharedsecret', 'varsyncpassword', 'varusersmotpinitsecret', 'varusersmotppin' );