mirror of
https://github.com/pi-hole/web.git
synced 2026-05-01 22:24:08 +01:00
Prevent potential execution of arbitary code through the PIHOLE_DOCKER_TAG variable and AUTHORIZED_HOSTNAMES
Signed-off-by: Adam Warner <me@adamwarner.co.uk>
This commit is contained in:
@@ -49,7 +49,7 @@
|
||||
$coreVersionStr = $core_current . (isset($core_commit) ? " (" . $core_branch . ", " . $core_commit . ")" : "");
|
||||
$ftlVersionStr = $FTL_current . (isset($FTL_commit) ? " (" . $FTL_branch . ", " . $FTL_commit . ")" : "");
|
||||
$webVersionStr = $web_current . (isset($web_commit) ? " (" . $web_branch . ", " . $web_commit . ")" : "");
|
||||
$dockerTag = getenv('PIHOLE_DOCKER_TAG');
|
||||
$dockerTag = htmlspecialchars(getenv('PIHOLE_DOCKER_TAG'));
|
||||
|
||||
$githubBaseUrl = "https://github.com/pi-hole";
|
||||
$coreUrl = $githubBaseUrl . "/pi-hole";
|
||||
|
||||
Reference in New Issue
Block a user