Prevent user from using a single quote in an AS path (see #81).

gmazoyer · Aug 5, 2019 · 439f7fd · 439f7fd
1 parent 2131cdd
commit 439f7fd
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/includes/utils.php b/includes/utils.php
@@ -261,6 +261,12 @@ function match_aspath_regexp($aspath_regexp) {
     return false;
   }
 
+  // AS path containing a ' (not a valid character, the string is automatically
+  // quoted if needed)
+  if (strpos($aspath_regexp, '\'') !== false) {
+    return false;
+  }
+
   // Check if the AS path regexp in in the list of regexp considered as
   // invalid (see config option)
   foreach ($config['filters']['aspath_regexp'] as $invalid_aspath_regexp) {