Skip to content

config_asterisk.sh: filter out any option or list item with new-line

Reidar Cederqvist requested to merge reidar-fix-asterisk-new-line-vulnerability into release-7.3

This is to avoid cases where the uci option is directly pushed into the asterisk config without checking the value, otherwise the value can contain a newline followed by a malisious asterisk config option+value

Edited by Reidar Cederqvist

Merge request reports