luci/modules/luci-mod-system/luasrc/controller
Jo-Philipp Wich 6f7736c436 luci-mod-system: prevent comment injection in mtdbackup endpoint
Rework the parameter handling to both prevent a crash when no parameter is
given and to prevent root command injection through the mtd index part of
the parameter value.

Fixes: 9840d310e ("modules: add backup module for mtdblock devices")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2018-11-14 20:46:04 +01:00
..
admin luci-mod-system: prevent comment injection in mtdbackup endpoint 2018-11-14 20:46:04 +01:00