mod_saslauth: Sanitize debugging information so it won't break terminal emulation when using GSSAPI auth.

Wed, 23 Dec 2009 23:09:44 +0100

author
Tobias Markmann <tm@ayena.de>
date
Wed, 23 Dec 2009 23:09:44 +0100
changeset 2397
da8d6ab0c8b4
parent 2396
39b2523bcf44
child 2398
44f694ce6aec

mod_saslauth: Sanitize debugging information so it won't break terminal emulation when using GSSAPI auth.

plugins/mod_saslauth.lua file | annotate | diff | comparison | revisions
--- a/plugins/mod_saslauth.lua	Wed Dec 23 16:46:49 2009 -0500
+++ b/plugins/mod_saslauth.lua	Wed Dec 23 23:09:44 2009 +0100
@@ -121,7 +121,7 @@
 	local text = stanza[1];
 	if text then
 		text = base64.decode(text);
-		log("debug", "%s", text); -- FIXME: binary output will screw up the terminal
+		log("debug", "%s", text:gsub("[%z\001-\009\011\012\014-\031]", " "));
 		if not text then
 			session.sasl_handler = nil;
 			session.send(build_reply("failure", "incorrect-encoding"));

mercurial