cwinfo/powerdns-admin
4
0
Fork 0
mirror of https://github.com/cwinfo/powerdns-admin.git synced 2025-06-14 12:06:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

escape special chars when creating group filter.

Browse Source 
The LDAP search filter used for group queries needs to be escaped so that group names with special characters will not break the search filter in queries.
This commit is contained in:
genericpenguin
2019-03-18 11:54:31 +11:00
committed by GitHub
parent 9f29a8e154
commit 0ad5d46a4c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/models.py
View File

@ -171,7 +171,7 @@ class User(db.Model):
whether a user is allowed to enter or not
"""
LDAP_BASE_DN = Setting().get('ldap_base_dn')
groupSearchFilter = "(&(objectcategory=group)(member=%s))" % groupDN
groupSearchFilter = "(&(objectcategory=group)(member=%s))" % ldap.filter.escape_filter_chars(groupDN)
result = [groupDN]
try:
groups = self.ldap_search(groupSearchFilter, LDAP_BASE_DN)