Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-26625

(8.0.z) WFCORE-6531 - standalone.sh and possibly other scripts usage of eval

XMLWordPrintable

      For example server opts to standalone.sh are assumed to not contain single quotes. If they are included, then the content will be direclty evaluated:

      ./standalone.sh "'; echo hello'"

      Will cause the echo to evaluate.

            rhn-support-ivassile Ilia Vassilev
            rhn-support-iweiss Ingo Weiss
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: