Page MenuHomeDevCentral

Validate site name
ClosedPublic

Authored by dereckson on Sun, Aug 9, 18:58.
Tags
None
Referenced Files
F42928631: D4151.id10889.diff
Mon, Aug 10, 03:09
F42925839: D4151.id10882.diff
Mon, Aug 10, 02:30
F42923734: D4151.id10890.diff
Mon, Aug 10, 02:03
F42923704: D4151.diff
Mon, Aug 10, 02:03
F42921923: D4151.id.diff
Mon, Aug 10, 01:32
F42921908: D4151.id10882.diff
Mon, Aug 10, 01:32
F42917814: D4151.id.diff
Mon, Aug 10, 00:31
F42915728: D4151.diff
Mon, Aug 10, 00:07
Subscribers
None
Tokens
"Y So Serious" token, awarded by dereckson.

Details

Summary

Site name can be an ASCII or IDN fully qualified domain name (FQDN).

This prevents path traversal by crafting a path to a location under
the attacker control where an init/update script could exist.

Diff Detail

Repository
rALK Alkane
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson created this revision.
  • Request and review by Qwen3.8-Max
  • Code change by GPT-5.6 Sol (High)
This revision is now accepted and ready to land.Sun, Aug 9, 23:16
This revision was automatically updated to reflect the committed changes.