summaryrefslogtreecommitdiffstats
path: root/src/usr/local/www/system_advanced_sysctl.php
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2016-06-22 12:32:22 -0400
committerjim-p <jimp@pfsense.org>2016-06-22 12:32:22 -0400
commitedd4c6337dbc8316bcfb2e9c1e50b9b00a25be5b (patch)
treeca2a0db5cc5ebb8b29ca2cdf08a97208aa2ccb37 /src/usr/local/www/system_advanced_sysctl.php
parent94b5eb1f3ee5960d44938abc200eccf7eabab3d5 (diff)
downloadpfsense-edd4c6337dbc8316bcfb2e9c1e50b9b00a25be5b.zip
pfsense-edd4c6337dbc8316bcfb2e9c1e50b9b00a25be5b.tar.gz
% and / are also allowed in values
Diffstat (limited to 'src/usr/local/www/system_advanced_sysctl.php')
-rw-r--r--src/usr/local/www/system_advanced_sysctl.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/src/usr/local/www/system_advanced_sysctl.php b/src/usr/local/www/system_advanced_sysctl.php
index 6467f25..c069079 100644
--- a/src/usr/local/www/system_advanced_sysctl.php
+++ b/src/usr/local/www/system_advanced_sysctl.php
@@ -142,8 +142,8 @@ if ($_POST) {
if (!$_POST['tunable'] || !isset($_POST['value'])) {
$input_errors[] = gettext("Both a name and a value must be specified.");
- } else if (preg_match("/[^a-zA-Z0-9.\-_]/", $_POST['value'])) {
- $input_errors[] = gettext("The value may only contain alphanumeric characters, - and _.");
+ } else if (preg_match("/[^a-zA-Z0-9.\-_%\/]/", $_POST['value'])) {
+ $input_errors[] = gettext("The value may only contain alphanumeric characters, -, _, %, and /.");
} else {
$tunableent['tunable'] = htmlspecialchars($_POST['tunable']);
$tunableent['value'] = htmlspecialchars($_POST['value']);
OpenPOWER on IntegriCloud