From 3fd44a18130bc5b4e007e5087e15e13b5ccfd947 Mon Sep 17 00:00:00 2001 From: shortcutme Date: Wed, 21 Nov 2018 19:28:11 +0100 Subject: [PATCH] Validate merger type before asking permission --- plugins/MergerSite/MergerSitePlugin.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/plugins/MergerSite/MergerSitePlugin.py b/plugins/MergerSite/MergerSitePlugin.py index e2196c75..3de92a91 100644 --- a/plugins/MergerSite/MergerSitePlugin.py +++ b/plugins/MergerSite/MergerSitePlugin.py @@ -212,6 +212,8 @@ class UiWebsocketPlugin(object): return super(UiWebsocketPlugin, self).actionPermissionDetails(to, permission) merger_type = permission.replace("Merger:", "") + if not re.match("^[A-Za-z0-9-]+$", merger_type): + raise Exception("Invalid merger_type: %s" % merger_type) merged_sites = [] for address, merged_type in merged_db.iteritems(): if merged_type != merger_type: