Browse Source
Merge pull request #5149 from Weishaupt/patch-1
Fix missing XML Escape in Password of INWX DNS API
pull/5036/merge
neil
6 days ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with
12 additions and
1 deletions
-
dnsapi/dns_inwx.sh
|
|
|
@ -163,6 +163,15 @@ _inwx_check_cookie() { |
|
|
|
return 1 |
|
|
|
} |
|
|
|
|
|
|
|
_htmlEscape() { |
|
|
|
local s |
|
|
|
s=${1//&/&} |
|
|
|
s=${s//</<} |
|
|
|
s=${s//>/>} |
|
|
|
s=${s//'"'/"} |
|
|
|
printf -- %s "$s" |
|
|
|
} |
|
|
|
|
|
|
|
_inwx_login() { |
|
|
|
|
|
|
|
if _inwx_check_cookie; then |
|
|
|
@ -170,6 +179,8 @@ _inwx_login() { |
|
|
|
return 0 |
|
|
|
fi |
|
|
|
|
|
|
|
XML_PASS=$(_htmlEscape "$INWX_Password") |
|
|
|
|
|
|
|
xml_content=$(printf '<?xml version="1.0" encoding="UTF-8"?> |
|
|
|
<methodCall> |
|
|
|
<methodName>account.login</methodName> |
|
|
|
@ -193,7 +204,7 @@ _inwx_login() { |
|
|
|
</value> |
|
|
|
</param> |
|
|
|
</params> |
|
|
|
</methodCall>' "$INWX_User" "$INWX_Password") |
|
|
|
</methodCall>' "$INWX_User" "$XML_PASS") |
|
|
|
|
|
|
|
response="$(_post "$xml_content" "$INWX_Api" "" "POST")" |
|
|
|
|
|
|
|
|
