deblan/PowerDNS-Admin
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

escape special chars when creating group filter.

Browse source 
The LDAP search filter used for group queries needs to be escaped so that group names with special characters will not break the search filter in queries.
This commit is contained in:
genericpenguin 2019-03-18 11:54:31 +11:00 committed by GitHub
parent 9f29a8e154
commit 0ad5d46a4c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/models.py
View file

@ -171,7 +171,7 @@ class User(db.Model):
whether a user is allowed to enter or not
"""
LDAP_BASE_DN = Setting().get('ldap_base_dn')
groupSearchFilter = "(&(objectcategory=group)(member=%s))" % groupDN
groupSearchFilter = "(&(objectcategory=group)(member=%s))" % ldap.filter.escape_filter_chars(groupDN)
result = [groupDN]
try:
groups = self.ldap_search(groupSearchFilter, LDAP_BASE_DN)