From 698294a2db2f86241d0c243853dfe373b6e65b14 Mon Sep 17 00:00:00 2001
From: Till Brehm <tbrehm@ispconfig.org>
Date: Fri, 17 Apr 2015 18:21:47 +0200
Subject: [PATCH] Added check for content of redirect variable.

---
 interface/web/capp.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/interface/web/capp.php b/interface/web/capp.php
index 2c143180f..b0568ba09 100644
--- a/interface/web/capp.php
+++ b/interface/web/capp.php
@@ -43,6 +43,7 @@ if($_SESSION["s"]["user"]['active'] != 1) {
 }
 
 if(!preg_match("/^[a-z]{2,20}$/i", $mod)) die('module name contains unallowed chars.');
+if($redirect != '' && !preg_match("/^[a-z0-9]+\/[a-z0-9_\.\-]+\?id=[0-9]{1,5}$/i", $redirect)) die('redirect contains unallowed chars.');
 
 //* Check if user may use the module.
 $user_modules = explode(",", $_SESSION["s"]["user"]["modules"]);
-- 
GitLab