beenull/servnest
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Don't allow double quotes in ns/caa.php actually

Browse source
This commit is contained in:
Miraty 2023-05-06 20:31:13 +02:00
parent 2d4915a73a
commit 2e238f629d
2 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
pg-act/ns/caa.php
View file

@ -8,7 +8,7 @@ if (!($_POST['flag'] >= 0 AND $_POST['flag'] <= 255))
if (!(preg_match('/^[a-z0-9]{1,127}$/D', $_POST['tag'])))
output(403, 'Wrong value for <code>tag</code>.');
if (!(preg_match('/^[a-zA-Z0-9 .,;"*|#~@=:!?%$+\/\()[\]_-]{1,255}$/D', $_POST['value'])))
if (!(preg_match('/^[a-zA-Z0-9 .,;*|#~@=:!?%$+\/\()[\]_-]{1,255}$/D', $_POST['value'])))
output(403, 'Wrong value for <code>value</code>.');
rateLimit();

4
pg-view/ns/caa.php
View file

@ -6,11 +6,11 @@
<br>
<label for="tag"><?= _('Tag') ?></label>
<br>
<input id="tag" minlenght="1" maxlength="128" pattern="^[a-z]{1,127}$" placeholder="issue" name="tag" type="text">
<input id="tag" minlenght="1" maxlength="128" pattern="^[a-z0-9]{1,127}$" placeholder="issue" name="tag" type="text">
<br>
<label for="value"><?= _('Value') ?></label>
<br>
<input id="value" minlenght="3" maxlength="1024" pattern="^[a-zA-Z0-9 .,;&quot;*|#~@=:!?%$+\/\()[\]_-]{1,255}$" placeholder="letsencrypt.org" name="value" type="text">
<input id="value" minlenght="3" maxlength="1024" pattern="^[a-zA-Z0-9 .,;*|#~@=:!?%$+\/\()[\]_-]{1,255}$" placeholder="letsencrypt.org" name="value" type="text">
<br>
<input type="submit" value="<?= _('Apply') ?>">
</form>