]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
Tainted data doesn't work here
authorNick Porter <nick@portercomputing.co.uk>
Fri, 22 Sep 2023 09:19:36 +0000 (10:19 +0100)
committerNick Porter <nick@portercomputing.co.uk>
Fri, 22 Sep 2023 09:19:36 +0000 (10:19 +0100)
- the escape function expects a URI, not just a DN
- escaping cn= makes cn\3d - so the DN becomes invalid

src/tests/modules/ldap/xlat_profile.unlang

index 58486e2ddc5406f9b7813379823f65900786384a..a79cadee3414494508eb6fcf7045ea3d4b399a17 100644 (file)
@@ -10,6 +10,8 @@ if (!((&reply.Framed-IP-Netmask == 255.255.0.0) && \
        test_fail
 }
 
-if (!%(ldap.profile:%{taint:cn=suspended,ou=profiles,dc=example,dc=com})) {
+if (!%(ldap.profile:cn=suspended,ou=profiles,dc=example,dc=com)) {
       test_fail
 }
+
+test_pass