Looking at the problem it seems that user input strings (ie: passwords)
need to be encapsulated in double quotes in order to protect special
characters like ampersands (&).

For instance, I'm looking in the ubiquity package source code:
scripts/mythbuntu/mythbuntu-install.py and we see the password read in:

self.passwd=self.db.get('passwd/user-password')

Subsequently, self.passwd is then passed in several functions throughout
the script.  Can't this be protected if we change the readin of the
password to include double quotes?  For example:

self.passwd='\"'+self.db.get('passwd/user-password')+'\"'

Is this the concept correct, and if so, how do I test the ubiquity
package after making the changes?

-- 
Mythbuntu Install hangs at 90% due to & in password
https://bugs.launchpad.net/bugs/363153
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to