Reject arguments containing new line characters

Refs bec3321fff
This commit is contained in:
Romain Vimont 2024-09-14 21:21:48 +02:00
parent 8453e3ba7d
commit e03888d587

View file

@ -225,7 +225,7 @@ validate_string(const char *s) {
// special shell characters.
// Since they are not properly escaped on Windows anyway (see
// sys/win/process.c), just forbid special shell characters.
if (strpbrk(s, " ;'\"*$?&`#\\|<>[]{}()!~")) {
if (strpbrk(s, " ;'\"*$?&`#\\|<>[]{}()!~\r\n")) {
LOGE("Invalid server param: [%s]", s);
return false;
}