diff options
| author | jim-p <jimp@pfsense.org> | 2014-08-06 15:26:41 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2014-08-06 15:27:49 -0400 |
| commit | 071f6059996bdb9d9d0a68082a14dc71c0fbabe6 (patch) | |
| tree | b546166975d2ce581fcdd7d74b7a3ca1fee32e26 /usr/local/www/services_dnsmasq.php | |
| parent | 12c887006320a3d01a3f761eca2dfc8f64c41fa2 (diff) | |
| download | pfsense-071f6059996bdb9d9d0a68082a14dc71c0fbabe6.zip pfsense-071f6059996bdb9d9d0a68082a14dc71c0fbabe6.tar.gz | |
Escape the individual dnsmasq advanced/custom options
Diffstat (limited to 'usr/local/www/services_dnsmasq.php')
| -rw-r--r-- | usr/local/www/services_dnsmasq.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/usr/local/www/services_dnsmasq.php b/usr/local/www/services_dnsmasq.php index 5c39178..7733f00 100644 --- a/usr/local/www/services_dnsmasq.php +++ b/usr/local/www/services_dnsmasq.php @@ -101,7 +101,7 @@ if ($_POST) { if ($config['dnsmasq']['custom_options']) { $args = ''; foreach (preg_split('/\s+/', $config['dnsmasq']['custom_options']) as $c) - $args .= "--$c "; + $args .= escapeshellarg("--{$c}") . " "; exec("/usr/local/sbin/dnsmasq --test $args", $output, $rc); if ($rc != 0) $input_errors[] = gettext("Invalid custom options"); |
