Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-26625

(8.0.z) WFCORE-6531 - standalone.sh and possibly other scripts usage of eval

    XMLWordPrintable

Details

    Description

      For example server opts to standalone.sh are assumed to not contain single quotes. If they are included, then the content will be direclty evaluated:

      ./standalone.sh "'; echo hello'"

      Will cause the echo to evaluate.

      Attachments

        Issue Links

          Activity

            People

              rhn-support-ivassile Ilia Vassilev
              rhn-support-iweiss Ingo Weiss
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: