summaryrefslogtreecommitdiffstats
path: root/usr/local/www/status.php
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2015-06-05 08:22:06 -0400
committerjim-p <jimp@pfsense.org>2015-06-05 08:22:30 -0400
commitfd192dbc97387a8e3eaf14118fcbef07092cba92 (patch)
tree417ee93c3c3750ae502017e6aa270eafe25ba625 /usr/local/www/status.php
parent3a19fd4a84d358ff8e6c9eedcad5b11f7f570fa8 (diff)
downloadpfsense-fd192dbc97387a8e3eaf14118fcbef07092cba92.zip
pfsense-fd192dbc97387a8e3eaf14118fcbef07092cba92.tar.gz
Also sanitize OpenVPN static/tls keys in status.php
Diffstat (limited to 'usr/local/www/status.php')
-rwxr-xr-xusr/local/www/status.php2
1 files changed, 2 insertions, 0 deletions
diff --git a/usr/local/www/status.php b/usr/local/www/status.php
index 8cdc87a..2f588e6 100755
--- a/usr/local/www/status.php
+++ b/usr/local/www/status.php
@@ -70,6 +70,8 @@ function doCmdT($title, $command) {
$line = preg_replace("/<pre-shared-key>.*?<\\/pre-shared-key>/", "<pre-shared-key>xxxxx</pre-shared-key>", $line);
$line = preg_replace("/<rocommunity>.*?<\\/rocommunity>/", "<rocommunity>xxxxx</rocommunity>", $line);
$line = preg_replace("/<prv>.*?<\\/prv>/", "<prv>xxxxx</prv>", $line);
+ $line = preg_replace("/<shared_key>.*?<\\/shared_key>/", "<shared_key>xxxxx</shared_key>", $line);
+ $line = preg_replace("/<tls>.*?<\\/tls>/", "<tls>xxxxx</tls>", $line);
$line = preg_replace("/<ipsecpsk>.*?<\\/ipsecpsk>/", "<ipsecpsk>xxxxx</ipsecpsk>", $line);
$line = preg_replace("/<md5-hash>.*?<\\/md5-hash>/", "<md5-hash>xxxxx</md5-hash>", $line);
$line = preg_replace("/<md5password>.*?<\\/md5password>/", "<md5password>xxxxx</md5password>", $line);
OpenPOWER on IntegriCloud