diff options
author | jim-p <jimp@pfsense.org> | 2017-06-13 13:11:23 -0400 |
---|---|---|
committer | jim-p <jimp@pfsense.org> | 2017-06-13 13:11:23 -0400 |
commit | aa18c5b9b62e110ebf88fbb24c39c2a13813bd89 (patch) | |
tree | dc991834902eefaff6107ec0231b08e5e4d491ec /src/usr/local | |
parent | 835d8b72effa274b5e2733f219fde00fee60f8e3 (diff) | |
download | pfsense-aa18c5b9b62e110ebf88fbb24c39c2a13813bd89.zip pfsense-aa18c5b9b62e110ebf88fbb24c39c2a13813bd89.tar.gz |
Redact BGP MD5 password/key in status output. Fixes #7642
Diffstat (limited to 'src/usr/local')
-rw-r--r-- | src/usr/local/www/status.php | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/usr/local/www/status.php b/src/usr/local/www/status.php index 37b4334..038c4b7 100644 --- a/src/usr/local/www/status.php +++ b/src/usr/local/www/status.php @@ -111,6 +111,8 @@ function doCmdT($title, $command, $method) { $line = preg_replace("/<passwordagain>.*?<\\/passwordagain>/", "<passwordagain>xxxxx</passwordagain>", $line); $line = preg_replace("/<crypto_password>.*?<\\/crypto_password>/", "<crypto_password>xxxxx</crypto_password>", $line); $line = preg_replace("/<crypto_password2>.*?<\\/crypto_password2>/", "<crypto_password2>xxxxx</crypto_password2>", $line); + $line = preg_replace("/<md5sigpass>.*?<\\/md5sigpass>/", "<md5sigpass>xxxxx</md5sigpass>", $line); + $line = preg_replace("/<md5sigkey>.*?<\\/md5sigkey>/", "<md5sigkey>xxxxx</md5sigkey>", $line); $line = str_replace("\t", " ", $line); echo htmlspecialchars($line, ENT_NOQUOTES); fwrite($ofd, $line); |