Jo-Philipp Wich 6f7736c436 luci-mod-system: prevent comment injection in mtdbackup endpoint ...

Rework the parameter handling to both prevent a crash when no parameter is
given and to prevent root command injection through the mtd index part of
the parameter value.

Fixes: 9840d310e ("modules: add backup module for mtdblock devices")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

2018-11-14 20:46:04 +01:00

12 KiB

Raw Blame History

View Raw