From: Alexander Marx <alexander.marx@ipfire.org>
Date: Thu, 27 Aug 2015 13:20:11 +0000 (+0200)
Subject: BUG10916: check comma in PSK field
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=refs%2Fheads%2FBUG10916;p=people%2Famarx%2Fipfire-2.x.git

BUG10916: check comma in PSK field
---

diff --git a/html/cgi-bin/vpnmain.cgi b/html/cgi-bin/vpnmain.cgi
index 8c44b7e93..4f47742cb 100644
--- a/html/cgi-bin/vpnmain.cgi
+++ b/html/cgi-bin/vpnmain.cgi
@@ -1413,6 +1413,10 @@ END
 		$errormessage = $Lang::tr{'invalid characters found in pre-shared key'};
 		goto VPNCONF_ERROR;
 	    }
+		if ($cgiparams{'PSK'} =~ /,/) {
+			$errormessage = $Lang::tr{'invalid characters found in pre-shared key'};
+			goto VPNCONF_ERROR;
+		}
 	} elsif ($cgiparams{'AUTH'} eq 'certreq') {
 	    if ($cgiparams{'KEY'}) {
 		$errormessage = $Lang::tr{'cant change certificates'};