luci-base: sys: prevent path traversal via sys.init routines
Filter the init script name parameter through fs.basename() to avoid invoking paths outside of /etc/init.d/. Reported-by: Graham R <gr348@cam.ac.uk> Signed-off-by: Jo-Philipp Wich <jo@mein.io>
parent
35df2ada
Please register or sign in to comment