vbatts/ntfy
1
0
Fork 0
Code Pull requests Activity

Make sure clear= values are checked

Browse source
This commit is contained in:
Philipp Heckel 2022-04-23 15:23:18 -04:00
parent 882f027f6c
commit 9c91ae2744
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
server/util.go
View file

@ -126,6 +126,9 @@ func parseActionsFromSimple(s string) ([]*action, error) {
newAction.Label = value newAction.Label = value
case "clear": case "clear":
lvalue := strings.ToLower(value) lvalue := strings.ToLower(value)
if !util.InStringList([]string{"true", "yes", "1", "false", "no", "0"}, lvalue) {
return nil, wrapErrHTTP(errHTTPBadRequestActionsInvalid, "'clear=%s' not allowed", value)
}
newAction.Clear = lvalue == "true" || lvalue == "yes" || lvalue == "1" newAction.Clear = lvalue == "true" || lvalue == "yes" || lvalue == "1"
case "url": case "url":
newAction.URL = value newAction.URL = value