Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

special character in strings can break RPCs #17

Closed
dcornejo opened this issue Apr 17, 2018 · 1 comment
Closed

special character in strings can break RPCs #17

dcornejo opened this issue Apr 17, 2018 · 1 comment

Comments

@dcornejo
Copy link
Contributor

passing a string containing a "<" character will break the RPC parsing:

Apr 17 10:08:53 ng1 clixon_backend[31155]: clixon_xml_parseerror: 188: XML error: xml_parse: line 0: syntax error: at or before: .

It appears that the character is not escaped and confuses the RPC parser. It is possible to require the sender to encode and receiver to decode the data, but this would not protect against a malicious injection.

@olofhagsand
Copy link
Member

Quite extensive changes. Should have been fixed long time ago,.... There may still remain corner-cases. Please report if detected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants