From e4f8fc2e7e5f31691629a5361000636f8a2b2398 Mon Sep 17 00:00:00 2001 From: Dietmar Maurer Date: Tue, 26 Nov 2013 07:50:20 +0100 Subject: [PATCH] allow dots in access paths Because storage IDs may contain dots. --- PVE/AccessControl.pm | 2 +- changelog.Debian | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/PVE/AccessControl.pm b/PVE/AccessControl.pm index 236efac..f03f6b5 100644 --- a/PVE/AccessControl.pm +++ b/PVE/AccessControl.pm @@ -543,7 +543,7 @@ sub normalize_path { $path = "/$path" if $path !~ m|^/|; - return undef if $path !~ m|^[[:alnum:]\-\_\/]+$|; + return undef if $path !~ m|^[[:alnum:]\.\-\_\/]+$|; return $path; } diff --git a/changelog.Debian b/changelog.Debian index 2db7133..c63bdb3 100644 --- a/changelog.Debian +++ b/changelog.Debian @@ -1,6 +1,8 @@ libpve-access-control (3.0-9) unstable; urgency=low * prevent user enumeration attacks + + * allow dots in access paths -- Proxmox Support Team Mon, 18 Nov 2013 09:06:38 +0100 -- 2.39.2