Hi Fabian,

re-including the BTS issue #665950 ...

On Do 26 Apr 2012 10:41:53 CEST Fabian Hickert wrote:

The problem is that passwords with special chars break the hook
execution? Is this correct?

Yes, and more. All substituted variables within hook scripts bear the risk of executing arbitrary code if spaces in %someHookVariable do not get escaped.

I guess, I can test this tomorrow evening..

Please do! Thanks a lot for your immediate response.

Greets,
Mike


--

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

GnuPG Key ID 0xB588399B
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

Attachment: pgpDlCQIOffZy.pgp
Description: Digitale PGP-Unterschrift

Reply via email to