proxmox-mirrors/pve-common
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-common synced 2025-08-04 17:56:46 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

PVE::ACME - untaint saved account data

Browse Source 
Signed-off-by: Dietmar Maurer <dietmar@proxmox.com>
This commit is contained in:
Dietmar Maurer 2018-07-26 10:45:25 +02:00 committed by Thomas Lamprecht
parent 34d8999638
commit bf5e9f8440
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/PVE/ACME.pm
View File

@ -152,7 +152,9 @@ sub load {
my ($self) = @_;
return if $self->{loaded};
$self->{loaded} = 1;
my $data = fromjs(file_get_contents($self->{path}));
my $raw = file_get_contents($self->{path});
if ($raw =~ m/^(.*)$/s) { $raw = $1; } # untaint
my $data = fromjs($raw);
$self->{$_} = $data->{$_} for @SAVED_VALUES;
if (defined(my $keystr = $data->{key})) {
my $key = Crypt::OpenSSL::RSA->new_private_key($keystr);