Prevent email aliases that are actually sendmail special destinations
authorJamie Cameron <jcameron@webmin.com>
Sun, 23 Nov 2008 01:40:15 +0000 (01:40 +0000)
committerJamie Cameron <jcameron@webmin.com>
Sun, 23 Nov 2008 01:40:15 +0000 (01:40 +0000)
sendmail/save_alias.cgi

index e55a37a..3edb0f8 100755 (executable)
@@ -64,7 +64,7 @@ else {
                $v = $in{"val_$i"};
                $v =~ s/^\s+//;
                $v =~ s/\s+$//;
-               if ($t == 1 && $v !~ /^(\S+)$/) {
+               if ($t == 1 && $v !~ /^([^\|\:\"\' \t\/\\\%]\S*)$/) {
                        &error(&text('asave_etype1', $v));
                        }
                elsif ($t == 2 && !&check_aliasfile($v, 1)) {