mirror/librenms-librenms
1
0
Fork 0
mirror of https://github.com/librenms/librenms.git synced 2024-10-07 16:52:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

XSS sanitize pwrstatd application script inputs (#14545)

Browse Source 
* XSS sanitize pwrstatd application script inputs

* Removing is_int logic
This commit is contained in:
bnerickson
2022-11-01 18:33:17 -07:00
committed by GitHub
parent b59cf980ca
commit a63b12a00d
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
includes/polling/applications/pwrstatd.inc.php
View File

@@ -31,7 +31,14 @@ $rrd_def = RrdDefinition::make()
$metrics = [];
foreach ($pwrstatd_data as $data) {
$sn = $data['sn'];
$sn = is_string($data['sn']) ? filter_var($data['sn'], FILTER_SANITIZE_STRING) : null;
if (is_null($data['sn'])) {
echo PHP_EOL . $name . ':' . ' Invalid or no psu serial number found.' . PHP_EOL;
continue;
}
$mruntime = $data['mruntime'];
$pcapacity = $data['pcapacity'];
$pload = $data['pload'];