mirror of
https://github.com/pi-hole/pi-hole.git
synced 2025-01-11 14:34:44 +00:00
Use printf to escape domain content. This prevents possible SQL injection issues
Signed-off-by: DL6ER <dl6er@dl6er.de>
This commit is contained in:
parent
5246b3e496
commit
a904c183df
1 changed files with 1 additions and 1 deletions
|
@ -104,7 +104,7 @@ fi
|
|||
|
||||
scanDatabaseTable() {
|
||||
local domain table type querystr result table_prev
|
||||
domain="${1}"
|
||||
domain="$(printf "%q" "${1}")"
|
||||
table="${2}"
|
||||
type="${3:-}"
|
||||
|
||||
|
|
Loading…
Reference in a new issue