DL6ER e92e6b837b Fix and rename validateHostname() -> validateClientPattern() ...

The regex was unanchored: `/[^<>;"]/` matched on the first character that was
not one of those four, so `evil<script>` passed. Output is escaped on render
anyway.

Its only caller is the client field in group management, which takes a host
name or an interface like `:eth0`. FTL matches both verbatim and only records
names of `[A-Za-z0-9._-]`, so we check exactly that.

Signed-off-by: DL6ER <dl6er@dl6er.de>

2026-08-22 06:42:14 +02:00

..

js

Fix and rename validateHostname() -> validateClientPattern()

2026-08-22 06:42:14 +02:00

lua

Fix dropdown-menu text color, when the theme is set to "default-auto"

2026-07-18 20:09:43 -03:00