Re: [exim] tainted data issues

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Jeremy Harris
Ημερομηνία:  
Προς: exim-users
Αντικείμενο: Re: [exim] tainted data issues
On 23/11/2020 14:20, Gary Stainburn via Exim-users wrote:
>   data = ${lookup{$local_part}lsearch{/etc/aliases.d/$domain}}


Don't use a tainted name as the filename for that lsearch.

Assuming that not doing the lsearch when the file doesn't exist
is what you want: use a dsearch in that directory to verify
that the file exists. Use the "return whole path" variant, so
that you can just feed that to lsearch.
--
Cheers,
Jeremy