spiceproxy : allow only spice port range

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

diff --git a/PVE/HTTPServer.pm b/PVE/HTTPServer.pm
index 89eff30fb7d846f693e79f3b5828a9e0711f0cbe..f51673554e3c7fdb4880b0d12307957be4803cc0 100755 (executable)
--- a/PVE/HTTPServer.pm
+++ b/PVE/HTTPServer.pm
@@ -500,6 +500,8 @@ sub handle_spice_proxy_request {
 
     eval {
 
+        die "Port $spiceport is not allowed" if ($spiceport < 61000 || $spiceport > 61099);
+
        my $rpcenv = $self->{rpcenv};
        $rpcenv->init_request();