mike/systeminformation
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #3 from EffectRenan/master

Browse Source 
Fix for Denial of Service vulnerability
This commit is contained in:
huntr.dev | the place to protect open source 2021-02-12 07:54:26 +00:00 committed by GitHub
commit 743cefc10c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
lib/internet.js
View File

@ -38,7 +38,6 @@ function inetChecksite(url, callback) {
const s = util.sanitizeShellString(url); const s = util.sanitizeShellString(url);
for (let i = 0; i <= 2000; i++) { for (let i = 0; i <= 2000; i++) {
if (!(s[i] === undefined || if (!(s[i] === undefined ||
s[i] === ' ' ||
s[i] === '{' || s[i] === '{' ||
s[i] === '}')) { s[i] === '}')) {
s[i].__proto__.toLowerCase = util.stringToLower; s[i].__proto__.toLowerCase = util.stringToLower;

1
lib/util.js
View File

@ -527,6 +527,7 @@ function sanitizeShellString(str) {
s[i] === '\n' || s[i] === '\n' ||
s[i] === '\'' || s[i] === '\'' ||
s[i] === '`' || s[i] === '`' ||
s[i] === ' ' ||
s[i] === '"')) { s[i] === '"')) {
result = result + s[i]; result = result + s[i];
} }