Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2025-11-04 07:45:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

Provide whitelist for $PWD

Browse Source 
see #1445
This commit is contained in:
Dirk Wetter
2020-01-14 20:41:08 +01:00
parent f0f8f3a318
commit 50c9075ba8
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
testssl.sh
View File

@@ -17196,10 +17196,10 @@ EOF
maketempf() {
TEMPDIR=$(mktemp -d /tmp/testssl.XXXXXX)
if [[ $? -ne 0 ]]; then
# for e.g. devices where we can't write to /tmp:
if [[ $PWD =~ \ ]]; then
# We can't allow this as we haven't quoted all strings depending on it, see #1445
fatal "\$PWD contains a blank: \"$PWD\"" $ERR_FCREATE
# For e.g. devices where we can't write to /tmp we chose $PWD but we can't
# allow every char as we haven't quoted all strings depending on it, see #1445
if [[ $PWD =~ ^[A-Za-z0-9\.,-/_]+$ ]]; then
fatal "\$PWD contains illegal chars: \"$PWD\"" $ERR_FCREATE
fi
TEMPDIR=$(mktemp -d "PWD/testssl.XXXXXX") || exit $ERR_FCREATE
fi