From aa18c5b9b62e110ebf88fbb24c39c2a13813bd89 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Tue, 13 Jun 2017 13:11:23 -0400
Subject: Redact BGP MD5 password/key in status output. Fixes #7642

---
 src/usr/local/www/status.php | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'src')

diff --git a/src/usr/local/www/status.php b/src/usr/local/www/status.php
index 37b4334..038c4b7 100644
--- a/src/usr/local/www/status.php
+++ b/src/usr/local/www/status.php
@@ -111,6 +111,8 @@ function doCmdT($title, $command, $method) {
 				$line = preg_replace("/<passwordagain>.*?<\\/passwordagain>/", "<passwordagain>xxxxx</passwordagain>", $line);
 				$line = preg_replace("/<crypto_password>.*?<\\/crypto_password>/", "<crypto_password>xxxxx</crypto_password>", $line);
 				$line = preg_replace("/<crypto_password2>.*?<\\/crypto_password2>/", "<crypto_password2>xxxxx</crypto_password2>", $line);
+				$line = preg_replace("/<md5sigpass>.*?<\\/md5sigpass>/", "<md5sigpass>xxxxx</md5sigpass>", $line);
+				$line = preg_replace("/<md5sigkey>.*?<\\/md5sigkey>/", "<md5sigkey>xxxxx</md5sigkey>", $line);
 				$line = str_replace("\t", "    ", $line);
 				echo htmlspecialchars($line, ENT_NOQUOTES);
 				fwrite($ofd, $line);
-- 
cgit v1.1