Command Injection - array
This commit is contained in:
parent
f947637463
commit
d000198689
@ -34,6 +34,16 @@ function inetChecksite(url, callback) {
|
|||||||
|
|
||||||
return new Promise((resolve) => {
|
return new Promise((resolve) => {
|
||||||
process.nextTick(() => {
|
process.nextTick(() => {
|
||||||
|
let result = {
|
||||||
|
url: url,
|
||||||
|
ok: false,
|
||||||
|
status: 404,
|
||||||
|
ms: null
|
||||||
|
};
|
||||||
|
if (typeof url !== "string") {
|
||||||
|
if (callback) { callback(result); }
|
||||||
|
return resolve(result);
|
||||||
|
}
|
||||||
let urlSanitized = '';
|
let urlSanitized = '';
|
||||||
const s = util.sanitizeShellString(url, true);
|
const s = util.sanitizeShellString(url, true);
|
||||||
for (let i = 0; i <= 2000; i++) {
|
for (let i = 0; i <= 2000; i++) {
|
||||||
@ -45,12 +55,7 @@ function inetChecksite(url, callback) {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
let result = {
|
result.url = urlSanitized;
|
||||||
url: urlSanitized,
|
|
||||||
ok: false,
|
|
||||||
status: 404,
|
|
||||||
ms: null
|
|
||||||
};
|
|
||||||
try {
|
try {
|
||||||
if (urlSanitized && !util.isPrototypePolluted()) {
|
if (urlSanitized && !util.isPrototypePolluted()) {
|
||||||
let t = Date.now();
|
let t = Date.now();
|
||||||
@ -123,21 +128,24 @@ function inetLatency(host, callback) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
host = host || '8.8.8.8';
|
host = host || '8.8.8.8';
|
||||||
let hostSanitized = '';
|
|
||||||
const s = (util.isPrototypePolluted() ? '8.8.8.8' : util.sanitizeShellString(host, true)).trim();
|
|
||||||
for (let i = 0; i <= 2000; i++) {
|
|
||||||
if (!(s[i] === undefined)) {
|
|
||||||
|
|
||||||
s[i].__proto__.toLowerCase = util.stringToLower;
|
|
||||||
const sl = s[i].toLowerCase();
|
|
||||||
if (sl && sl[0] && !sl[1]) {
|
|
||||||
hostSanitized = hostSanitized + sl[0];
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return new Promise((resolve) => {
|
return new Promise((resolve) => {
|
||||||
process.nextTick(() => {
|
process.nextTick(() => {
|
||||||
|
if (typeof host !== "string") {
|
||||||
|
if (callback) { callback(null); }
|
||||||
|
return resolve(null);
|
||||||
|
}
|
||||||
|
let hostSanitized = '';
|
||||||
|
const s = (util.isPrototypePolluted() ? '8.8.8.8' : util.sanitizeShellString(host, true)).trim();
|
||||||
|
for (let i = 0; i <= 2000; i++) {
|
||||||
|
if (!(s[i] === undefined)) {
|
||||||
|
s[i].__proto__.toLowerCase = util.stringToLower;
|
||||||
|
const sl = s[i].toLowerCase();
|
||||||
|
if (sl && sl[0] && !sl[1]) {
|
||||||
|
hostSanitized = hostSanitized + sl[0];
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
let params;
|
let params;
|
||||||
let filt;
|
let filt;
|
||||||
if (_linux || _freebsd || _openbsd || _netbsd || _darwin) {
|
if (_linux || _freebsd || _openbsd || _netbsd || _darwin) {
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user