Merge pull request #484 from genericpenguin/genericpenguin-escape-chars-groupsearchfilter

escape special chars when creating group filter.
This commit is contained in:
Khanh Ngo 2019-04-01 21:41:56 +07:00 committed by GitHub
commit ae7b41ece2
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -171,7 +171,7 @@ class User(db.Model):
whether a user is allowed to enter or not
"""
LDAP_BASE_DN = Setting().get('ldap_base_dn')
groupSearchFilter = "(&(objectcategory=group)(member=%s))" % groupDN
groupSearchFilter = "(&(objectcategory=group)(member=%s))" % ldap.filter.escape_filter_chars(groupDN)
result = [groupDN]
try:
groups = self.ldap_search(groupSearchFilter, LDAP_BASE_DN)