Skip to content

Commit 1a65555

Browse files
Fix/2021 03 validate interface field (hestiacp#1666)
* Valid interface input v-add-sys-ip * Update changelog Co-authored-by: Jaap Marcus <9754650+jaapmarcus@users.noreply.github.com>
1 parent 831caaa commit 1a65555

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

CHANGELOG.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,7 @@ All notable changes to this project will be documented in this file.
4040
- Improved IDN domain handling to resolve issues with Let's Encrypt SSL and mail domain services.
4141
- Added private folder to openbasedir permission for all main templates.
4242
- Disabled changing backup folder via Web UI because it used symbolic link instead of mount causing issues with restore mail / user files.
43+
- Fix xss vulnerability in v-add-sys-ip (thanks @numanturle)
4344

4445
## [1.3.3] - Service Release
4546
### Bugfixes

func/main.sh

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -962,6 +962,7 @@ is_format_valid() {
962962
host) is_object_format_valid "$arg" "$arg_name" ;;
963963
hour) is_cron_format_valid "$arg" $arg_name ;;
964964
id) is_int_format_valid "$arg" 'id' ;;
965+
interface) is_interface_format_valid "$arg" ;;
965966
ip) is_ip_format_valid "$arg" ;;
966967
ip_name) is_domain_format_valid "$arg" 'IP name';;
967968
ip_status) is_ip_status_format_valid "$arg" ;;

0 commit comments

Comments
 (0)