Navigation

Changeset 2076

Timestamp:

06/22/06 07:53:23 (2 years ago)

Author:

qldrob

Message:

Fix for potential security hole if a shell escape character was in CALLERID(name) or (number)

Files:

r2048	r2076
710	710	exten => out_fax,1,txfax(${TXFAX_NAME}\|caller)
711	711	exten => out_fax,2,Hangup
712		exten => h,1,system(/var/lib/asterisk/bin/fax-process.pl --to ${EMAILADDR} --from ${FAX_RX_FROM} --subject "Fax from ${~~CALLERID(number)} ${CALLERID(name)}" --attachment ${CALLERID(number~~)}.pdf --type application/pdf --file ${FAXFILE});
	712	exten => h,1,system(/var/lib/asterisk/bin/fax-process.pl --to ${EMAILADDR} --from ${FAX_RX_FROM} --subject "Fax from ${URIENCODE(${CALLERID(number)})} ${URIENCODE(${CALLERID(name)})}" --attachment ${URIENCODE(${CALLERID(number)})}.pdf --type application/pdf --file ${FAXFILE});
713	713	exten => h,2,Hangup()
714	714