From: Nick Porter <nick@portercomputing.co.uk>
Date: Fri, 22 Sep 2023 09:19:36 +0000 (+0100)
Subject: Tainted data doesn't work here
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ded0dc34e1284c5138625583b9a76366f0600b3c;p=thirdparty%2Ffreeradius-server.git

Tainted data doesn't work here

- the escape function expects a URI, not just a DN
- escaping cn= makes cn\3d - so the DN becomes invalid
---

diff --git a/src/tests/modules/ldap/xlat_profile.unlang b/src/tests/modules/ldap/xlat_profile.unlang
index 58486e2ddc5..a79cadee341 100644
--- a/src/tests/modules/ldap/xlat_profile.unlang
+++ b/src/tests/modules/ldap/xlat_profile.unlang
@@ -10,6 +10,8 @@ if (!((&reply.Framed-IP-Netmask == 255.255.0.0) && \
 	test_fail
 }
 
-if (!%(ldap.profile:%{taint:cn=suspended,ou=profiles,dc=example,dc=com})) {
+if (!%(ldap.profile:cn=suspended,ou=profiles,dc=example,dc=com)) {
       test_fail
 }
+
+test_pass