mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

status.php: Sanitize influx_pass and cert_key. Fixes #9727 Fixes #9728

Browse Source
This commit is contained in:
jim-p 2019-09-05 12:31:50 -04:00
parent 5457213f60
commit 8bc944bbcb
1 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
src/usr/local/www/status.php
View File

@ -63,16 +63,17 @@ $output_file = "/tmp/status_output.tgz";
$filtered_tags = array(
'accountkey', 'authorizedkeys', 'auth_pass', 'auth_user', 'bcrypt-hash',
'crypto_password', 'crypto_password2', 'dns_nsupdatensupdate_key',
'encryption_password', 'gold_encryption_password', 'gold_password',
'ipsecpsk', 'ldap_bindpw', 'lighttpd_ls_password',
'lighttpd_ls_password', 'md5-hash', 'md5password', 'md5sigkey',
'md5sigpass', 'nt-hash', 'passphrase', 'password', 'passwordagain',
'pre-shared-key', 'proxypass', 'proxy_passwd', 'proxyuser',
'proxy_user', 'prv', 'radius_secret', 'redis_password',
'redis_passwordagain', 'rocommunity', 'secret', 'shared_key', 'tls',
'varclientpasswordinput', 'varclientsharedsecret', 'varsyncpassword',
'varusersmotpinitsecret', 'varusersmotppin'
'cert_key', 'crypto_password', 'crypto_password2',
'dns_nsupdatensupdate_key', 'encryption_password',
'gold_encryption_password', 'gold_password', 'influx_pass', 'ipsecpsk',
'ldap_bindpw', 'lighttpd_ls_password', 'lighttpd_ls_password',
'md5-hash', 'md5password', 'md5sigkey', 'md5sigpass', 'nt-hash',
'passphrase', 'password', 'passwordagain', 'pre-shared-key',
'proxypass', 'proxy_passwd', 'proxyuser', 'proxy_user', 'prv',
'radius_secret', 'redis_password', 'redis_passwordagain', 'rocommunity',
'secret', 'shared_key', 'tls', 'varclientpasswordinput',
'varclientsharedsecret', 'varsyncpassword', 'varusersmotpinitsecret',
'varusersmotppin'
);
if ($_POST['submit'] == "DOWNLOAD" && file_exists($output_file)) {